{"id":3133,"date":"2026-02-24T11:19:20","date_gmt":"2026-02-24T11:19:20","guid":{"rendered":"https:\/\/certera.com\/kb\/?p=3133"},"modified":"2026-02-24T11:19:21","modified_gmt":"2026-02-24T11:19:21","slug":"how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis","status":"publish","type":"post","link":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/","title":{"rendered":"How to Add a Cross-Sign Certificate to the Chain on Windows Platform IIS?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The installation of Windows IIS with an SSL might not be as straightforward as the certification and the transfer. The partial certificate chain can create warnings and trust problems even in cases where the SSL certificate is valid.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is where cross-signing is involved. You will be informed on how to include a cross-signature certificate in the chain of trust on the Windows IIS, to strip off other signing roots, and then to make sure that your site is trusted by both the modern and the elderly. Building a clean and reliable certificate chain using the steps is necessary, and it works everywhere.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Also Read:<\/strong> <a href=\"https:\/\/certera.com\/blog\/sectigo-new-public-roots-and-issuing-cas-hierarchy-2025-migration-guide\/\">Sectigo New Public Roots and Issuing CAs Hierarchy [2025 Migration Guide]<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is a Cross Sign Certificate?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It is a normal behaviour that CAs can have several root certificates, and the earlier the roots, the more they will be spread on older systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In order to take advantage of this fact, the CAs give the cross-sign certificates, so that their certificates could have as many supports as possible. One of the root certificates that has been utilised to cross-sign the other is the cross-sign certificate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Also Read:<\/strong> <a href=\"https:\/\/certera.com\/blog\/root-certificate-vs-intermediate-certificate-the-real-difference\/\">Root Certificate vs Intermediate Certificate Difference<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Steps to Add a Cross-Sign Certificate to the Chain in IIS<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Import the Cross-Signing Intermediate Certificate in IIS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When there is a lack of trust in an SSL certificate, the issue is usually the lack of an intermediate certificate, rather than the lack of the SSL certificate. In order to prevent browser errors and trust warnings, IIS must have the correct cross-signing intermediate certificate installed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Here&#8217;s how to do it:<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Start the Certificate Manager<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Press <strong>Win + R<\/strong><\/li>\n\n\n\n<li>Click on certlm.msc and press <strong>Enter<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This gives an opening into the system certificate store, in which IIS is used.<\/p>\n\n\n\n<ul start=\"2\" class=\"wp-block-list\">\n<li>Find Your Way to the Right Store.<\/li>\n\n\n\n<li>Increase Small <strong>Intermediate Certification Authorities<\/strong>.<\/li>\n\n\n\n<li>Click<strong> Certificates.<\/strong><\/li>\n\n\n\n<li>Import the Certificate<\/li>\n\n\n\n<li>Click the <strong>Certificates<\/strong> pane with your right hand<\/li>\n\n\n\n<li>Select <strong>All Tasks &#8211; Import<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>On opening the certificate import Wizard:<\/strong><\/p>\n\n\n\n<ul start=\"2\" class=\"wp-block-list\">\n<li>Click <strong>Next<\/strong><\/li>\n\n\n\n<li>Click <strong>Browse<\/strong> and choose the intermediate certificate that has been downloaded.<\/li>\n\n\n\n<li>deciding Choose<strong> Place all certificates in the following store<\/strong>.<\/li>\n\n\n\n<li>Confirm <strong>Intermediate Certification Authorities<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Finish.<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Windows will now bring in the certificate at the appropriate place<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Download the Intermediate Certificate, which is correct.<\/li>\n<\/ul>\n\n\n\n<ol start=\"5\" class=\"wp-block-list\"><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ensure that the certificate is compatible with your key, which is an SSL one:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>RSA<\/strong>: Sectigo R46<\/li>\n\n\n\n<li><strong>ECC<\/strong>: Sectigo E46<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The wrong one can be used to break the chain of the SSL.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Verify the Installation:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Go back to: <strong>Intermediate Certification Authorities &#8211; Certificates<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">When the certificate is shown in the list, the installation is over. The chain of the certificates can now be legitimately checked by IIS.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Delete Self-Signed R46 \/ E46 Root Certificate<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">To have a clean and trusted setup of the SSL, <strong>self-signed R46 or E46 root certificates should not be installed on IIS<\/strong>. In case they exist, they are able to mess with the validation of the chain of the SSL and are to be eliminated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The following is a guide to their checking and cleaning:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Launch the Certificate Manager<\/strong>:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\"><\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Press <strong>Win + R<\/strong><\/li>\n\n\n\n<li>Type certlm.msc and press <strong>Enter<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Go to the <strong>Trusted Root Store<\/strong>:<\/p>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\"><\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Increase <strong>Trusted Root Certification Authority<\/strong>.<\/li>\n\n\n\n<li>Click <strong>Certificates<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recover the Self-Signed Certificates<\/strong><\/p>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\"><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Ambiguities at one or both ends usually appear in either of the following (or both):<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Sectigo Public Server Authentication Root R46<\/strong> (Self-Signed)<\/li>\n\n\n\n<li><strong>Sectigo Public Server Authentication Root E46<\/strong> (Self-Signed)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Delete the Certificate:<\/strong><\/p>\n\n\n\n<ol start=\"4\" class=\"wp-block-list\"><\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right-click the certificate<\/li>\n\n\n\n<li>Select <strong>Delete<\/strong><\/li>\n\n\n\n<li>Affirm the timeliness when requested.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">After this has been deleted, the chain of the SSL can have trust in the appropriate trusted roots as opposed to self-signing, which is useful in certifying the certificates effectively by the IIS. Confirm the Certificate Chain<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Verify the Certificate Chain<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Once the above steps have been followed, it is good to check whether everything is in place.<\/li>\n\n\n\n<li>Use the <a href=\"https:\/\/certera.com\/ssl-tools\/ssl-checker\">SSL Checker tool<\/a>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">It can be used to check the existence of a full chain of certificates, including any intermediate or cross-signing certificates, carry out risk assessment, and identify the certificate to be trusted.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Quick note:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It has been noted that the cross-signing certification is especially recommended to be installed to restore confidence in systems and devices that are older in the sense of not having yet accepted new root certificates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Also Read:<\/strong> <a href=\"https:\/\/certera.com\/kb\/how-to-install-ssl-certificate-on-microsoft-iis\/\">How to Install SSL Certificate on Microsoft IIS?<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Even Windows IIS does not have an automatic option with SSL. Instances of such steps must be done manually, e.g., the installation or configuration of certificates. Failure to automate these steps will mean that you will have to deal with issues by hand or compensate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To have a complete and trusted chain of SSL in the IIS, add the cross-signing intermediate certificate to the Local Machine certificate store. This makes the site secure and consistent on both new and old devices without giving rise to browser warnings.<strong><\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a><\/a>Need Help with SSL?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Are you not aware of what kind of certificate to take and how to install it? Inquire with <a href=\"https:\/\/certera.com\/\">our experts in the field of SSL<\/a>, who shall help guide you to the most appropriate certificate under your requirements and purchase the same.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The installation of Windows IIS with an SSL might not be as straightforward as the certification and the transfer. The partial certificate chain can create warnings and trust problems even in cases where the SSL certificate is valid. That is where cross-signing is involved. You will be informed on how to include a cross-signature certificate<span class=\"morelink d-block mt-3\"><a href=\"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/\">Read More<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":3134,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[430,429],"class_list":["post-3133","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-installation","tag-configuring-your-ssl-certificate-chain-in-iis","tag-cross-sign-certificate","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Add a Cross-Sign Certificate to the Chain on IIS?<\/title>\n<meta name=\"description\" content=\"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\/E46 on Windows, and remove the Self-Signed Certificate IIS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Add a Cross-Sign Certificate to the Chain on IIS?\" \/>\n<meta property=\"og:description\" content=\"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\/E46 on Windows, and remove the Self-Signed Certificate IIS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base - Certera.com\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/certeraLLC\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-24T11:19:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-24T11:19:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"620\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"certerakbdbuser\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:site\" content=\"@certera_llc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"certerakbdbuser\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/\"},\"author\":{\"name\":\"certerakbdbuser\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/person\\\/c25e1519e333a817f30c805384cba014\"},\"headline\":\"How to Add a Cross-Sign Certificate to the Chain on Windows Platform IIS?\",\"datePublished\":\"2026-02-24T11:19:20+00:00\",\"dateModified\":\"2026-02-24T11:19:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/\"},\"wordCount\":870,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cross-sign-certificate.webp\",\"keywords\":[\"configuring your SSL certificate chain in IIS\",\"Cross-Sign Certificate\"],\"articleSection\":[\"SSL Installation\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/\",\"name\":\"How to Add a Cross-Sign Certificate to the Chain on IIS?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cross-sign-certificate.webp\",\"datePublished\":\"2026-02-24T11:19:20+00:00\",\"dateModified\":\"2026-02-24T11:19:21+00:00\",\"description\":\"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\\\/E46 on Windows, and remove the Self-Signed Certificate IIS.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#primaryimage\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cross-sign-certificate.webp\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cross-sign-certificate.webp\",\"width\":960,\"height\":620,\"caption\":\"Add Cross-Sign Certificate IIS\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/certera.com\\\/kb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Add a Cross-Sign Certificate to the Chain on Windows Platform IIS?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#website\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/\",\"name\":\"Knowledge Base - Certera.com\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\"},\"alternateName\":\"Certera Knowledgebase\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/certera.com\\\/kb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#organization\",\"name\":\"Certera\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/brand-certera.svg\",\"contentUrl\":\"https:\\\/\\\/certera.com\\\/kb\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/brand-certera.svg\",\"caption\":\"Certera\"},\"image\":{\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/certeraLLC\\\/\",\"https:\\\/\\\/x.com\\\/certera_llc\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/certera-llc\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/certera.com\\\/kb\\\/#\\\/schema\\\/person\\\/c25e1519e333a817f30c805384cba014\",\"name\":\"certerakbdbuser\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g\",\"caption\":\"certerakbdbuser\"},\"sameAs\":[\"https:\\\/\\\/certerakb.ssltoolsonline.com\"],\"url\":\"https:\\\/\\\/certera.com\\\/kb\\\/author\\\/certerakbdbuser\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Add a Cross-Sign Certificate to the Chain on IIS?","description":"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\/E46 on Windows, and remove the Self-Signed Certificate IIS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/","og_locale":"en_US","og_type":"article","og_title":"How to Add a Cross-Sign Certificate to the Chain on IIS?","og_description":"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\/E46 on Windows, and remove the Self-Signed Certificate IIS.","og_url":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/","og_site_name":"Knowledge Base - Certera.com","article_publisher":"https:\/\/www.facebook.com\/certeraLLC\/","article_published_time":"2026-02-24T11:19:20+00:00","article_modified_time":"2026-02-24T11:19:21+00:00","og_image":[{"width":960,"height":620,"url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp","type":"image\/jpeg"}],"author":"certerakbdbuser","twitter_card":"summary_large_image","twitter_creator":"@certera_llc","twitter_site":"@certera_llc","twitter_misc":{"Written by":"certerakbdbuser","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#article","isPartOf":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/"},"author":{"name":"certerakbdbuser","@id":"https:\/\/certera.com\/kb\/#\/schema\/person\/c25e1519e333a817f30c805384cba014"},"headline":"How to Add a Cross-Sign Certificate to the Chain on Windows Platform IIS?","datePublished":"2026-02-24T11:19:20+00:00","dateModified":"2026-02-24T11:19:21+00:00","mainEntityOfPage":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/"},"wordCount":870,"commentCount":0,"publisher":{"@id":"https:\/\/certera.com\/kb\/#organization"},"image":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp","keywords":["configuring your SSL certificate chain in IIS","Cross-Sign Certificate"],"articleSection":["SSL Installation"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/","url":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/","name":"How to Add a Cross-Sign Certificate to the Chain on IIS?","isPartOf":{"@id":"https:\/\/certera.com\/kb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#primaryimage"},"image":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#primaryimage"},"thumbnailUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp","datePublished":"2026-02-24T11:19:20+00:00","dateModified":"2026-02-24T11:19:21+00:00","description":"Step-by-Step Tutorial to learn how to add a Cross-Signed certificate, Sectigo Public Server Authentication Root R46\/E46 on Windows, and remove the Self-Signed Certificate IIS.","breadcrumb":{"@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#primaryimage","url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp","contentUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2026\/02\/cross-sign-certificate.webp","width":960,"height":620,"caption":"Add Cross-Sign Certificate IIS"},{"@type":"BreadcrumbList","@id":"https:\/\/certera.com\/kb\/how-to-add-a-cross-sign-certificate-to-the-chain-on-windows-platform-iis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/certera.com\/kb\/"},{"@type":"ListItem","position":2,"name":"How to Add a Cross-Sign Certificate to the Chain on Windows Platform IIS?"}]},{"@type":"WebSite","@id":"https:\/\/certera.com\/kb\/#website","url":"https:\/\/certera.com\/kb\/","name":"Knowledge Base - Certera.com","description":"","publisher":{"@id":"https:\/\/certera.com\/kb\/#organization"},"alternateName":"Certera Knowledgebase","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/certera.com\/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/certera.com\/kb\/#organization","name":"Certera","url":"https:\/\/certera.com\/kb\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/certera.com\/kb\/#\/schema\/logo\/image\/","url":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/01\/brand-certera.svg","contentUrl":"https:\/\/certera.com\/kb\/wp-content\/uploads\/2023\/01\/brand-certera.svg","caption":"Certera"},"image":{"@id":"https:\/\/certera.com\/kb\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/certeraLLC\/","https:\/\/x.com\/certera_llc","https:\/\/www.linkedin.com\/company\/certera-llc\/"]},{"@type":"Person","@id":"https:\/\/certera.com\/kb\/#\/schema\/person\/c25e1519e333a817f30c805384cba014","name":"certerakbdbuser","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=mm&r=g","caption":"certerakbdbuser"},"sameAs":["https:\/\/certerakb.ssltoolsonline.com"],"url":"https:\/\/certera.com\/kb\/author\/certerakbdbuser\/"}]}},"_links":{"self":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/3133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/comments?post=3133"}],"version-history":[{"count":3,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/3133\/revisions"}],"predecessor-version":[{"id":3139,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/posts\/3133\/revisions\/3139"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/media\/3134"}],"wp:attachment":[{"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/media?parent=3133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/categories?post=3133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/certera.com\/kb\/wp-json\/wp\/v2\/tags?post=3133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}