Search Our Database

Overview

Older Android devices may not accept the new CA root certificate from GlobalSign. In such cases, using a Cross Certificate can provide a solution by chaining to an alternate root certificate.

Prerequisites

• Access to the server where the certificate needs to be updated.

Steps to Implement the Cross Certificate

Instead of using the CA root certificate when installing Alpha SSL, you can use the Cross Certificate instead. The steps should be the same as when installing the CA root certificate:

Obtain the Cross Certificate

• • Use the cross certificate from the link given https://support.globalsign.com/ca-certificates/root-certificates/globalsign-cross-certificates

Install the Cross Certificate

• • Log in to your server and navigate to the directory where your SSL certificates are stored.
  • Save the cross certificate content into a file, e.g.,
    cross-certificate.crt

Update the SSL Configuration

• • Open your web server’s SSL configuration file. This could be for Apache
    /etc/httpd/conf.d/ssl.conf

    or

    /etc/apache2/sites-available/default-ssl.conf

    or Nginx

    /etc/nginx/sites-available/default
  • Add the cross certificate to the SSL certificate chain. For example, in Apache:
    apache

    SSLCertificateFile /path/to/your_certificate.crt
    SSLCertificateKeyFile /path/to/your_private_key.key
    SSLCertificateChainFile /path/to/cross-certificate.crt

    In Nginx:

    nginx

    ssl_certificate /path/to/your_certificate.crt;
    ssl_certificate_key /path/to/your_private_key.key;
    ssl_trusted_certificate /path/to/cross-certificate.crt;

Restart the Web Server

• • After updating the SSL configuration, restart your web server to apply the changes.For Apache:
    sudo systemctl restart httpd

    or

    systemctl restart apache2

    For Nginx:
    sudo systemctl restart nginx

Add the Cross Certificate in DirectAdmin

• Log in to DirectAdmin:
  • Open DirectAdmin and log in with your admin credentials.

• Navigate to SSL Certificates:
  • Go to “Account Manager” -> “SSL Certificates”.

• Install the Cross Certificate:
  • Click on “Paste a pre-generated certificate and key”.
  • In the “Certificate” field, paste the existing SSL certificate.
  • In the “Certificate Authority / Intermediate Certificate” field, paste the cross certificate.
  • Click “Save”.

Add the Cross Certificate in cPanel

• Log in to cPanel:
  • Open cPanel and log in with your credentials.

• Navigate to SSL/TLS:
  • Go to “SSL/TLS” under the “Security” section.

• Manage SSL Sites:
  • Click on “Manage SSL sites”.

• Install the Cross Certificate:
  • Find the domain you want to update and click “Update Certificate”.
  • In the “Certificate (CRT)” field, paste the existing SSL certificate.
  • In the “Certificate Authority Bundle (CABUNDLE)” field, paste the cross certificate.
  • Click “Install Certificate”.

Additional Resources

For more information on cross certificates and their usage, refer to the GlobalSign Cross Certificates documentation.

Summary

By following the above steps, you can ensure that older Android devices, which cannot take the new root certificate, will still be able to establish a secure connection using the cross certificate.