Cloud monitors returning SSL errors...

Document ID : KB000102953
Last Modified Date : 01/03/2019
Show Technical Document Details
Question:
My cloud monitors are returning SSL certificate error:
(9260) SSL certificate problem: unable to get local issuer certificate (Peer certificate cannot be authenticated with given CA certificates)

But it works fine in the browser.
Answer:
While reviewing the certificate chain, for the URL being monitored, we found that the Intermediate Certificate was missing.

This caused the error (9260) SSL certificate problem: unable to get local issuer certificate (Peer certificate cannot be authenticated with given CA certificates) to show up.

To resolve this, update the site to provide the Intermediate Certificate.

There are different ways to install an Intermediate Certificate and it all depends on on your Certificate Authority.  A few examples would be for Microsoft IIS and Exchange - https://knowledge.digicert.com/solution/SO16588.html.  For pfx - https://rootsecurity.nl/2013/07/21/create-a-pfx-file-containing-the-intermediate-ca-certificate-using-openssl-on-windows/

For a more detailed explanation on what an Intermediate Certificate is https://knowledge.digicert.com/generalinformation/INFO4033.html