Can someone please ELI5 how I go to where I download the cert and then install it. I tried following instructions but I haven't got it to work. I'm using Apache and Debian.

I have this in the virtual host file:

<VirtualHost 23.239.27.244:443>
     SSLEngine On
     SSLCertificateFile /etc/apache2/ssl/redsec.ru.crt
     SSLCertificateKeyFile /etc/apache2/ssl/redsec.ru.key
     SSLCACertificateFile /etc/apache2/ssl/sub.class1.server.ca.pem

     ServerAdmin webmaster@redsec.ru
     ServerName redsec.ru
     DocumentRoot /file/path/www
     ErrorLog  /file/path/log/error.log
     CustomLog /file/path/log/access.log combined
</VirtualHost>

and these files:

ca.pem private.key redsec.ru.csr redsec.ru.key ssl.crt sub.class1.server.ca.pem

Just found this guide:

https://www.digitalocean.com/community/ ... e-on-a-vps

I was able to fix it. I have this:

<VirtualHost 23.239.27.244:443>
     SSLEngine On
     SSLCertificateFile /etc/apache2/ssl/ssl.crt
     SSLCertificateKeyFile /etc/apache2/ssl/private.key
     SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem

     ServerAdmin webmaster@redsec.ru
     ServerName redsec.ru
     DocumentRoot /file/path/www
     ErrorLog  /file/path/log/error.log
     CustomLog /file/path/log/access.log combined
</VirtualHost>

Google Chrome on Android does not trust it.

You installed a https cert for www.redsec.ru, redsec.ru. However these go to different places according to DNS; www.redsec.ru goes to orain.org and that SSL cert is presented. https://redsec.ru should work.

_________________
Rgds
Stephen
(Linux user since kernel version 0.11)