Certificate chain

To use your certificate in your web server, you need the certificate chain. Depending on the age of your certificate, you will need either the Generation 1 chain (certificate issued up to and including 2016) or the Generation 2 chain (certificate issued from 2017).

Generation 1 (until 2016)

Alternatively, you can download the complete certificate chain in PEM format. This contains the three certificates listed above in summarized form.

Generation 2 (from 2017 onwards)

Alternatively, you can download the complete certificate chain in PEM format. This contains the three certificates listed above in summarized form.

Sectigo TCS (from 2023 onwards)

The situation for certificates issued by Sectigo TCS is more complicated and the required chain depends on the kind of certificate issued. For an overview see the page of DFN-CERT about TCS certificates (german only).