Question:
SSL Certificate is not recognized as valid on legacy devices (Android 4X, Old IOS). How to fix?
Answer:
That is possible for Comodo Certificates.
The main thing you should know is that you will need to make some changes to a certificates chain.
On an example of Apache 2.4.9 please follow a guide on how to set up SSL.
After everything has been done and your website resolves as HTTPS correctly, do the following:
1. Find and open your current certificate in a text editor ;
(You can check configuration to find a path to a certificate: e.g. /etc/apache2/sites-enabled/000-default.conf for Ubuntu includes path for certificate and string 'SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem' shows certificate location itself. From system to system paths may vary.)
2. Open your site certificate in a text editor.
Add there two blocks including root and specific intermediate chain below site certificate ;
For example if certificate initially included:
| -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIQE553nZKKeoPq1kf6iN7auDANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIwMDQyMDAwMDAwMFoXDTIxMDQyMTIzNTk1OVowFTETMBEGA1UEAxMKaG9z dGVkLmZ1bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALIvIh7pLEwG lC84+wuzemtOi5zWYpXg2gLIp+Hr6vWofuYzbxKhHQLlsUuHJ3mMRQhRcGWTmI1v C2qocDRTpy804yPpz+nrVhhevZniW9MPg1maQgPOcdbUINzWdUT6WZEFg9DVrOj/ NQRFXcducjtWHwE3dMy7ws4JreoI8epNARmrWFTHshWxO3cL4b0LLRbOG16B6s09 BfDv5NF2Wm4EHv98mgWHwePQqdQ3XZ/kWLkcV3oCeK3t+J8s8PztSKdeEG/hbL5i yeljU/sfVm+1TFYPRdcyeu30eV4otEWHOeipfPUxI4QC4yIS5uyOzsjQx/4U8ctU Y7wle3NTnfkCAwEAAaOCAoMwggJ/MB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF 4bgBjWHhMB0GA1UdDgQWBBQSTE/dgNt43q4GcG7m5bjVBrib7jAOBgNVHQ8BAf8E BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRw czovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBP BggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9t YWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0 cDovL29jc3Auc2VjdGlnby5jb20wJQYDVR0RBB4wHIIKaG9zdGVkLmZ1boIOd3d3 Lmhvc3RlZC5mdW4wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB9PvL4j/+IVWgk wsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXGXTEtUAAAEAwBHMEUCIAr63zpOX094 //t4bwpGl9sMmoFOwFkqzK+ldPjACHeGAiEA3fqT9t7ws8m/PrrNXBgeIQnq4OKm 9QYjiytlH2kEoPUAdwCUILwejtWNbIhzH4KLIiwN0dpNXmxPlD1h204vWE2iwgAA AXGXTEt8AAAEAwBIMEYCIQDrzLW8UyfmVsnXwatKVgVf3eChRlktRq1C9EBn3BDX /QIhAI2VSJJjUQ01YQGyl7rWPYEh86Vg5/lzoLE9ibSXZvJfMA0GCSqGSIb3DQEB CwUAA4IBAQAEVJKyyq/alWNuxDDcjE9IxQ6sjTN+eJFYWzLuybYgLSh+tj0gMxUt 2fMzvgMwtHZZJYX2LRhJxUlJyaEQtYfiPV+P7v5DcpZdc3zj7idXVf+p1CPEkLo4 HA0YwEYvbSAjueiuDMVXxQ0DWj+2hCeyguHlrN6Ld/nA8FbZMZqPy0FidLS9AOuo kOEcEobe0EFnhRdKNjgmv4kZJAI/R/1U75DDYkx2GvIRRi52Rclko6cBuDgxVSfY GYB6D11iZGeo/VGMKRmCcR4kf+sxsEHzBHUvgwHhDVJ7xC5HttxdPfP1CVQjdjJy /mn/qbHuybKBmhEfKDIY7ARSgGH+c7ym -----END CERTIFICATE----- |
Then after changes it will look like:
Green is a website certificate, Red = root, Blue = special AAA intermediate certificate.
| -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIQE553nZKKeoPq1kf6iN7auDANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIwMDQyMDAwMDAwMFoXDTIxMDQyMTIzNTk1OVowFTETMBEGA1UEAxMKaG9z dGVkLmZ1bjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALIvIh7pLEwG lC84+wuzemtOi5zWYpXg2gLIp+Hr6vWofuYzbxKhHQLlsUuHJ3mMRQhRcGWTmI1v C2qocDRTpy804yPpz+nrVhhevZniW9MPg1maQgPOcdbUINzWdUT6WZEFg9DVrOj/ NQRFXcducjtWHwE3dMy7ws4JreoI8epNARmrWFTHshWxO3cL4b0LLRbOG16B6s09 BfDv5NF2Wm4EHv98mgWHwePQqdQ3XZ/kWLkcV3oCeK3t+J8s8PztSKdeEG/hbL5i yeljU/sfVm+1TFYPRdcyeu30eV4otEWHOeipfPUxI4QC4yIS5uyOzsjQx/4U8ctU Y7wle3NTnfkCAwEAAaOCAoMwggJ/MB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb+ZsF 4bgBjWHhMB0GA1UdDgQWBBQSTE/dgNt43q4GcG7m5bjVBrib7jAOBgNVHQ8BAf8E BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdodHRw czovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgwdjBP BggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBRG9t YWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0 cDovL29jc3Auc2VjdGlnby5jb20wJQYDVR0RBB4wHIIKaG9zdGVkLmZ1boIOd3d3 Lmhvc3RlZC5mdW4wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB9PvL4j/+IVWgk wsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXGXTEtUAAAEAwBHMEUCIAr63zpOX094 //t4bwpGl9sMmoFOwFkqzK+ldPjACHeGAiEA3fqT9t7ws8m/PrrNXBgeIQnq4OKm 9QYjiytlH2kEoPUAdwCUILwejtWNbIhzH4KLIiwN0dpNXmxPlD1h204vWE2iwgAA AXGXTEt8AAAEAwBIMEYCIQDrzLW8UyfmVsnXwatKVgVf3eChRlktRq1C9EBn3BDX /QIhAI2VSJJjUQ01YQGyl7rWPYEh86Vg5/lzoLE9ibSXZvJfMA0GCSqGSIb3DQEB CwUAA4IBAQAEVJKyyq/alWNuxDDcjE9IxQ6sjTN+eJFYWzLuybYgLSh+tj0gMxUt 2fMzvgMwtHZZJYX2LRhJxUlJyaEQtYfiPV+P7v5DcpZdc3zj7idXVf+p1CPEkLo4 HA0YwEYvbSAjueiuDMVXxQ0DWj+2hCeyguHlrN6Ld/nA8FbZMZqPy0FidLS9AOuo kOEcEobe0EFnhRdKNjgmv4kZJAI/R/1U75DDYkx2GvIRRi52Rclko6cBuDgxVSfY GYB6D11iZGeo/VGMKRmCcR4kf+sxsEHzBHUvgwHhDVJ7xC5HttxdPfP1CVQjdjJy /mn/qbHuybKBmhEfKDIY7ARSgGH+c7ym -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGEzCCA/ugAwIBAgIQfVtRJrR2uhHbdBYLvFMNpzANBgkqhkiG9w0BAQwFADCB iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTgx MTAyMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjCBjzELMAkGA1UEBhMCR0IxGzAZBgNV BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UE ChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFJTQSBEb21haW4g VmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1nMz1tc8INAA0hdFuNY+B6I/x0HuMjDJsGz99J/LEpgPLT+N TQEMgg8Xf2Iu6bhIefsWg06t1zIlk7cHv7lQP6lMw0Aq6Tn/2YHKHxYyQdqAJrkj eocgHuP/IJo8lURvh3UGkEC0MpMWCRAIIz7S3YcPb11RFGoKacVPAXJpz9OTTG0E oKMbgn6xmrntxZ7FN3ifmgg0+1YuWMQJDgZkW7w33PGfKGioVrCSo1yfu4iYCBsk Haswha6vsC6eep3BwEIc4gLw6uBK0u+QDrTBQBbwb4VCSmT3pDCg/r8uoydajotY uK3DGReEY+1vVv2Dy2A0xHS+5p3b4eTlygxfFQIDAQABo4IBbjCCAWowHwYDVR0j BBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFI2MXsRUrYrhd+mb +ZsF4bgBjWHhMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHSAEFDASMAYGBFUdIAAw CAYGZ4EMAQIBMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0 LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDB2Bggr BgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNv bS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZaHR0cDov L29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAMr9hvQ5Iw0/H ukdN+Jx4GQHcEx2Ab/zDcLRSmjEzmldS+zGea6TvVKqJjUAXaPgREHzSyrHxVYbH 7rM2kYb2OVG/Rr8PoLq0935JxCo2F57kaDl6r5ROVm+yezu/Coa9zcV3HAO4OLGi H19+24rcRki2aArPsrW04jTkZ6k4Zgle0rj8nSg6F0AnwnJOKf0hPHzPE/uWLMUx RP0T7dWbqWlod3zu4f+k+TY4CFM5ooQ0nBnzvg6s1SQ36yOoeNDT5++SR2RiOSLv xvcRviKFxmZEJCaOEDKNyJOuB56DPi/Z+fVGjmO+wea03KbNIaiGCpXZLoUmGv38 sbZXQm2V0TP2ORQGgkE49Y9Y3IBbpNV9lXj9p5v//cWoaasm56ekBYdbqbe4oyAL l6lFhd2zi+WJN44pDfwGF/Y4QA5C5BIG+3vzxhFoYt/jmPQT2BVPi7Fp2RBgvGQq 6jG35LWjOhSbJuMLe/0CjraZwTiXWTb2qHSihrZe68Zk6s+go/lunrotEbaGmAhY LcmsJWTyXnW0OMGuf1pGg+pRyrbxmRE1a6Vqe8YAsOf4vmSyrcjC8azjUeqkk+B5 yOGBQMkKW+ESPMFgKuOXwIlCypTPRpgSabuY0MLTDXJLR27lk8QyKGOHQ+SwMj4K 00u/I5sUKUErmgQfky3xxzlIPK1aEn8= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIQOXJEOvkit1HX02wQ3TE1lTANBgkqhkiG9w0BAQwFADB7 MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4 MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5 MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sI s9CsVw127c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnG vDoZtF+mvX2do2NCtnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQ Ijy8/hPwhxR79uQfjtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfb IWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0 tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97E xwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNV icQNwZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5 D9kCnusSTJV882sFqV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJ WBp/kjbmUZIO8yZ9HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ 5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzG KAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaOB8jCB7zAfBgNVHSMEGDAWgBSg EQojPpbxB+zirynvgqV/0DCktDAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rID ZsswDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAG BgRVHSAAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwuY29tb2RvY2EuY29t L0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0GCSqGSIb3DQEBDAUA A4IBAQAYh1HcdCE9nIrgJ7cz0C7M7PDmy14R3iJvm3WOnnL+5Nb+qh+cli3vA0p+ rvSNb3I8QzvAP+u431yqqcau8vzY7qN7Q/aGNnwU4M309z/+3ri0ivCRlv79Q2R+ /czSAaF9ffgZGclCKxO/WIu6pKJmBHaIkU4MiRTOok3JMrO66BQavHHxW/BBC5gA CiIDEOUMsfnNkjcZ7Tvx5Dq2+UUTJnWvu6rvP3t3O9LEApE9GQDTF1w52z97GA1F zZOFli9d31kWTz9RvdVFGD/tSo7oBmF0Ixa1DVBzJ0RHfxBdiSprhTEUxOipakyA vGp4z7h/jnZymQyd/teRCBaho1+V -----END CERTIFICATE----- |
Attention! Root and intermediates may vary. Refer to actual ones from this article.
Check configuration:
apachectl -t
Reboot apache:
sudo service apache2 reload
Changes reflects immidiatelly, your SSL Certificate will be shown as trusted and valid in both modern and legacy browsers.
| Before (Android 4.4) | After (Android 4.4) |
 |
 |
