Guides

Practical fixes for error messages you run into when working with certificates. Each article explains the cause, shows the commands and points to the right tool.

Android 13 certificate error: GlobalSign R46 and the cross-certificate fixWhy Android 13 and older do not trust new certificates chaining to GlobalSign Root R46, why sending the root along does not help, and how a cross certificate fixes it – step by step.6 min read · Read ›“key values mismatch”: when certificate and key do not belong togethernginx says “key values mismatch”, Apache “Certificate and private key do not match”, IIS cannot find the private key: the four most common causes and how to find and fix them in minutes.5 min read · Read ›Convert PFX to PEM (and back)Split PFX/P12 into PEM files and build a PFX from PEM: in the browser without OpenSSL or with the right OpenSSL commands – including the “unsupported” and “password incorrect” errors with OpenSSL 3 and Windows.5 min read · Read ›“unable to get local issuer certificate”: find and fix the missing intermediatecurl, Python, Git, Node or Java report “unable to get local issuer certificate” or “PKIX path building failed”: what causes it (usually a missing intermediate), how to check and how to fix it on the server or the client.6 min read · Read ›