https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5217460#M1117127 <P>SSL Labs reports that the certificate chain is incomplete. I'm looking into this for a client and am unsure what the issue is. I can see the cert on the ASA, and SSL is bound to the cert. Any insight on how/if this can be repaired?<BR /><BR /></P><P>Many thanks in advance.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="scottish_0-1730298778777.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/232724i6DBA7212F4A9EA5A/image-size/medium?v=v2&amp;px=400" role="button" title="scottish_0-1730298778777.png" alt="scottish_0-1730298778777.png" /></span></P> Wed, 30 Oct 2024 14:38:48 GMT scottish 2024-10-30T14:38:48Z https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5217460#M1117127 <P>SSL Labs reports that the certificate chain is incomplete. I'm looking into this for a client and am unsure what the issue is. I can see the cert on the ASA, and SSL is bound to the cert. Any insight on how/if this can be repaired?<BR /><BR /></P><P>Many thanks in advance.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="scottish_0-1730298778777.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/232724i6DBA7212F4A9EA5A/image-size/medium?v=v2&amp;px=400" role="button" title="scottish_0-1730298778777.png" alt="scottish_0-1730298778777.png" /></span></P> Wed, 30 Oct 2024 14:38:48 GMT https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5217460#M1117127 scottish 2024-10-30T14:38:48Z https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5217715#M1117141 <P>I think you would need more details from SSL Labs on exactly what they are looking for here.&nbsp;</P> Wed, 30 Oct 2024 20:58:28 GMT https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5217715#M1117141 ahollifield 2024-10-30T20:58:28Z https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5218179#M1117183 <P>Probably the ASA does not have all the certificates in the chain imported? you can check this from the ASA certificate properties or you can download it to your endpoint and check the last tab where it shows you the whole chain.</P> Thu, 31 Oct 2024 15:08:57 GMT https://community.cisco.com/t5/network-security/ssl-labs-reports-asa-cert-rating-is-a-b-because-of-quot-extra/m-p/5218179#M1117183 Aref Alsouqi 2024-10-31T15:08:57Z