Explains

Welcome to the htrace.sh wiki!

You can file an issue about it and ask that it be added.

---

Chain of Trust

• ★ - specifies a server certificate that matches the CN field, so if your domain is domain.com, the CN value should also domain.com for the first certificate in the chain, (always gold/yellow/orange)

• ✓ - show you correct relationship between certificates (always green)

• × - determines where the problem with the chain is, the opposite of the above (always red)

• ⊙ - the certificate is located in the local certificate store (gold/yellow/orange) or not (red)

• 2x - means a duplicate root certificate, include a root certificate to the chain is not a good practice but it's not a bug, sometimes administrators add it (gold/yellow/orange)

  Why you shouldn't include root certificate? Please see:

  • Should the trusted Root CA be a part of the certificate chain?
  • Should the root certificate go on the server?
  • SSL root certificate optional?