SSL Labs reports ASA Cert rating is a B because of "Extra Download".

[scottish]

SSL Labs reports that the certificate chain is incomplete. I'm looking into this for a client and am unsure what the issue is. I can see the cert on the ASA, and SSL is bound to the cert. Any insight on how/if this can be repaired?

Many thanks in advance.

[ahollifield]

I think you would need more details from SSL Labs on exactly what they are looking for here. 

[Aref Alsouqi]

Probably the ASA does not have all the certificates in the chain imported? you can check this from the ASA certificate properties or you can download it to your endpoint and check the last tab where it shows you the whole chain.