What is an Intermediate Certificate?
What is an Intermediate Certificate?
Learn what an Intermediate Certificate is, why it exists, how it protects Root Certificates, and why it is essential for SSL certificate trust.
Reading Time: 5–6 min
Embedded Files
Industry Update: SSL certificate lifetimes are changing. Learn how the move to 47-day certificates will impact businesses between 2026 and 2029.
What is an Intermediate Certificate?
What is an Intermediate Certificate?
An Intermediate Certificate is a digital certificate issued by a trusted Root Certificate Authority (Root CA). It acts as the bridge between the highly trusted Root Certificate and the SSL certificate installed on your website.
Instead of allowing Root Certificates to sign every website certificate directly, Certificate Authorities use Intermediate Certificates to strengthen security and reduce risk.
Without Intermediate Certificates, modern SSL trust would not function as securely as it does today.
What is an Intermediate Certificate?
What is an Intermediate Certificate?
An Intermediate Certificate is a digital certificate issued by a trusted Root Certificate Authority (Root CA). It acts as the bridge between the highly trusted Root Certificate and the SSL certificate installed on your website.
Instead of allowing Root Certificates to sign every website certificate directly, Certificate Authorities use Intermediate Certificates to strengthen security and reduce risk.
Without Intermediate Certificates, modern SSL trust would not function as securely as it does today.
Where Does an Intermediate Certificate Fit?
Where Does an Intermediate Certificate Fit?
Every HTTPS website relies on a certificate chain.
The chain typically looks like this:
Root Certificate
↓
Intermediate Certificate
↓
Website SSL Certificate
When someone visits your website, their browser checks this chain before establishing a secure HTTPS connection.
If every certificate in the chain is trusted, the browser displays the familiar padlock icon.
Why Intermediate Certificates Improve Security
Why Intermediate Certificates Improve Security
Using Intermediate Certificates provides several important security benefits:
Protects the Root Certificate from unnecessary exposure
Allows Certificate Authorities to revoke compromised intermediates without replacing the Root Certificate
Makes certificate management more scalable
Maintains browser trust while reducing security risks
This layered approach is one of the reasons the public SSL ecosystem remains secure.
What Happens if an Intermediate Certificate Is Missing?
What Happens if an Intermediate Certificate Is Missing?
If your web server fails to provide the required Intermediate Certificate, browsers may not be able to verify the complete chain of trust.
Common symptoms include:
"Your connection is not private"
SSL Certificate Chain Incomplete
Certificate verification failures
HTTPS warnings despite a valid SSL certificate
In many cases, the SSL certificate itself is perfectly valid the missing Intermediate Certificate simply prevents browsers from validating it correctly.
How Can You Check Your Intermediate Certificate?
How Can You Check Your Intermediate Certificate?
Several free tools allow you to inspect your certificate chain:
DigiCert SSL Checker
Qualys SSL Labs
OpenSSL command-line tools
These tools quickly identify whether your server is presenting the complete certificate chain.
Frequently Asked Questions
Frequently Asked Questions
Is an Intermediate Certificate required?
Is an Intermediate Certificate required?
Yes. Most public SSL certificates require one or more Intermediate Certificates to establish browser trust.
Can a website have multiple Intermediate Certificates?
Can a website have multiple Intermediate Certificates?
Yes. Some certificate chains contain multiple Intermediate Certificates depending on the issuing Certificate Authority.
Does every SSL certificate use an Intermediate Certificate?
Does every SSL certificate use an Intermediate Certificate?
Nearly all publicly trusted SSL certificates do. Modern browser trust relies on this layered certificate hierarchy.
Page updated
Google Sites
Report abuse