# Comodo secure email certificate

**URL:** <https://community.ciphermail.com/t/comodo-secure-email-certificate/289>\
**Category:** Gateway\
**Created:** [April 25, 2012, 10:41am UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289 "2012-04-25T10:41:49Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Perry\_Peeters](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@Perry\_Peeters](https://community.ciphermail.com/u/Perry_Peeters)\
**Post date:** [April 25, 2012, 10:41am UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/1 "2012-04-25T10:41:49Z")

</div>

Thanks Martijn,

Comodo root and intermediate were included in the p7b's of your site.  
After importing them into the root and certificates store the warning message disappeared.  
The CA column still shows "false", I've already tried to delete and import the (end-user) certficate again  
but it still shows "false".  
Is CA "false" correct for end-user certificates ?

Thanks,

Perry

> **···**
>
> ----------------------------------------------------------------------
> 
> Message: 1  
> Date: Wed, 25 Apr 2012 08:43:51 +0200 (CEST)  
> From: Perry Peeters \<p.peeters(a)deonet.nl\>  
> Subject: Comodo secure email certificate  
> To: users(a)lists.djigzo.com  
> Message-ID: \<617d4b17-93a7-46eb-acb6-c724b8552dea(a)deolinux1\>  
> Content-Type: text/plain; charset=utf-8
> 
> After buying a secure email certificate from Comodo I imported the certificate  
> into Djigzo.  
> The certficate shows up with the following message in the Info column:  
> "Error building certPath. No issuer ce..."  
> Also CA shows "false"  
> What caused this and how can we get this resolved ?
> 
> ------------------------------
> 
> Message: 2  
> Date: Wed, 25 Apr 2012 08:52:52 +0200  
> From: Martijn Brinkers \<martijn(a)djigzo.com\>  
> Subject: Re: Comodo secure email certificate  
> To: users(a)lists.djigzo.com  
> Message-ID: \<4F979F44.1060903(a)djigzo.com\>  
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> 
> On 04/25/2012 08:43 AM, Perry Peeters wrote:
> 
> > After buying a secure email certificate from Comodo I imported the certificate  
> > into Djigzo.  
> > The certficate shows up with the following message in the Info column:  
> > "Error building certPath. No issuer ce..."  
> > Also CA shows "false"  
> > What caused this and how can we get this resolved ?
> 
> Did you install the Comodo root and intermediate certificate? The  
> warning "no issuer cert.." is shown if the certificate chain (i.e., the  
> trust chain from certificate to a trusted root) is not complete. You can  
> import the p7b files with some roots and intermediate certificates from  
> [http://www.djigzo.com/downloads.html](http://www.djigzo.com/downloads.html) (see certificates). The  
> intermediates need to be imported into the certificates store and the  
> roots into the root store. I'm not sure whether the Comodo root and  
> intermediate certificate(s) are included with the p7b's though.  
> Alternatively you can export the chain from the system on which the  
> Comodo certificate is stored and import the chain into DJIGZO.
> 
> Kind regards,
> 
> Martijn Brinkers
> 
> ------------------------------
> 
> \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_  
> Users mailing list  
> Users(a)lists.djigzo.com  
> [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users)
> 
> End of Users Digest, Vol 35, Issue 7  
> \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

---

<div class="post-metadata">

**Author:** ![lst\_hoe021](https://avatars.discourse-cdn.com/v4/letter/l/58956e/32.png) [@lst\_hoe021](https://community.ciphermail.com/u/lst_hoe021)\
**Post date:** [April 25, 2012, 10:49am UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/2 "2012-04-25T10:49:18Z")

</div>

Zitat von Perry Peeters \<p.peeters(a)deonet.nl\>:

> Thanks Martijn,
> 
> Comodo root and intermediate were included in the p7b's of your site.  
> After importing them into the root and certificates store the  
> warning message disappeared.  
> The CA column still shows "false", I've already tried to delete and  
> import the (end-user) certficate again  
> but it still shows "false".  
> Is CA "false" correct for end-user certificates ?

Yes, because end-user certificates are indeed not a root-CA.

Regards

Andreas

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 25, 2012, 11:17am UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/3 "2012-04-25T11:17:46Z")

</div>

Can you send me your Comodo certificate (i.e., the .cer file) privately  
(to martijn(a)djigzo.com). It might be that Comodo is using a different  
intermediate certificate now which is not included with the provided  
.p7b from the website.

Kind regards,

Martijn Brinkers

> **···**
>
> On 04/25/2012 12:41 PM, Perry Peeters wrote:
> 
> > Thanks Martijn,
> > 
> > Comodo root and intermediate were included in the p7b's of your site.  
> > After importing them into the root and certificates store the warning message disappeared.  
> > The CA column still shows "false", I've already tried to delete and import the (end-user) certficate again  
> > but it still shows "false".  
> > Is CA "false" correct for end-user certificates ?

---

<div class="post-metadata">

**Author:** ![lst\_hoe021](https://avatars.discourse-cdn.com/v4/letter/l/58956e/32.png) [@lst\_hoe021](https://community.ciphermail.com/u/lst_hoe021)\
**Post date:** [April 25, 2012, 11:51am UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/4 "2012-04-25T11:51:48Z")

</div>

Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:

> **···**
>
> > On 04/25/2012 12:41 PM, Perry Peeters wrote:
> > 
> > > Thanks Martijn,
> > > 
> > > Comodo root and intermediate were included in the p7b's of your site.  
> > > After importing them into the root and certificates store the  
> > > warning message disappeared.  
> > > The CA column still shows "false", I've already tried to delete and  
> > > import the (end-user) certficate again  
> > > but it still shows "false".  
> > > Is CA "false" correct for end-user certificates ?
> > 
> > Can you send me your Comodo certificate (i.e., the .cer file) privately  
> > (to martijn(a)djigzo.com). It might be that Comodo is using a different  
> > intermediate certificate now which is not included with the provided  
> > .p7b from the website.
> 
> Correct me if i'm wrong but the CA column should be "false" for  
> end-user certificates in the certificates panel, no? Only in the root  
> panel the CA should be true??
> 
> Regards
> 
> Andreas

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 25, 2012, 12:11pm UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/5 "2012-04-25T12:11:44Z")

</div>

An intermediate certificate is also a CA so intermediate certificates  
also have CA column to be true. End-user certificates should always have  
CA to be false.

Kind regards,

Martijn Brinkers

> **···**
>
> On 01/-10/-28163 08:59 PM, lst\_hoe02(a)kwsoft.de wrote:
> 
> > Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:
> > 
> > > On 04/25/2012 12:41 PM, Perry Peeters wrote:
> > > 
> > > > Thanks Martijn,
> > > > 
> > > > Comodo root and intermediate were included in the p7b's of your site.  
> > > > After importing them into the root and certificates store the warning  
> > > > message disappeared.  
> > > > The CA column still shows "false", I've already tried to delete and  
> > > > import the (end-user) certficate again  
> > > > but it still shows "false".  
> > > > Is CA "false" correct for end-user certificates ?
> > > 
> > > Can you send me your Comodo certificate (i.e., the .cer file) privately  
> > > (to martijn(a)djigzo.com). It might be that Comodo is using a different  
> > > intermediate certificate now which is not included with the provided  
> > > .p7b from the website.
> > 
> > Correct me if i'm wrong but the CA column should be "false" for end-user  
> > certificates in the certificates panel, no? Only in the root panel the  
> > CA should be true??

---

<div class="post-metadata">

**Author:** ![lst\_hoe021](https://avatars.discourse-cdn.com/v4/letter/l/58956e/32.png) [@lst\_hoe021](https://community.ciphermail.com/u/lst_hoe021)\
**Post date:** [April 25, 2012, 12:27pm UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/6 "2012-04-25T12:27:35Z")

</div>

Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:

> **···**
>
> > On 01/-10/-28163 08:59 PM, lst\_hoe02(a)kwsoft.de wrote:
> > 
> > > Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:
> > > 
> > > > On 04/25/2012 12:41 PM, Perry Peeters wrote:
> > > > 
> > > > > Thanks Martijn,
> > > > > 
> > > > > Comodo root and intermediate were included in the p7b's of your site.  
> > > > > After importing them into the root and certificates store the warning  
> > > > > message disappeared.  
> > > > > The CA column still shows "false", I've already tried to delete and  
> > > > > import the (end-user) certficate again  
> > > > > but it still shows "false".  
> > > > > Is CA "false" correct for end-user certificates ?
> > > > 
> > > > Can you send me your Comodo certificate (i.e., the .cer file) privately  
> > > > (to martijn(a)djigzo.com). It might be that Comodo is using a different  
> > > > intermediate certificate now which is not included with the provided  
> > > > .p7b from the website.
> > > 
> > > Correct me if i'm wrong but the CA column should be "false" for end-user  
> > > certificates in the certificates panel, no? Only in the root panel the  
> > > CA should be true??
> > 
> > An intermediate certificate is also a CA so intermediate certificates  
> > also have CA column to be true. End-user certificates should always have  
> > CA to be false.
> 
> My impression was, that the question of the OP was about end-user  
> certificate and not the intermediate, but i have not closely monitored  
> the thread.
> 
> Regards
> 
> Andreas

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 25, 2012, 12:56pm UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/7 "2012-04-25T12:56:10Z")

</div>

You were right. The question was about an end-user certificate and and  
end-user certificate should never have CA true. I just wanted to add  
some extra information that some certificates (namely intermediate  
certificates) in the certificate store can have CA true.

Kind regards,

Martijn Brinkers

> **···**
>
> On 01/-10/-28163 08:59 PM, lst\_hoe02(a)kwsoft.de wrote:
> 
> > Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:
> > 
> > > On 01/-10/-28163 08:59 PM, lst\_hoe02(a)kwsoft.de wrote:
> > > 
> > > > Zitat von Martijn Brinkers \<martijn(a)djigzo.com\>:
> > > > 
> > > > > On 04/25/2012 12:41 PM, Perry Peeters wrote:
> > > > > 
> > > > > > Thanks Martijn,
> > > > > > 
> > > > > > Comodo root and intermediate were included in the p7b's of your site.  
> > > > > > After importing them into the root and certificates store the warning  
> > > > > > message disappeared.  
> > > > > > The CA column still shows "false", I've already tried to delete and  
> > > > > > import the (end-user) certficate again  
> > > > > > but it still shows "false".  
> > > > > > Is CA "false" correct for end-user certificates ?
> > > > > 
> > > > > Can you send me your Comodo certificate (i.e., the .cer file) privately  
> > > > > (to martijn(a)djigzo.com). It might be that Comodo is using a different  
> > > > > intermediate certificate now which is not included with the provided  
> > > > > .p7b from the website.
> > > > 
> > > > Correct me if i'm wrong but the CA column should be "false" for end-user  
> > > > certificates in the certificates panel, no? Only in the root panel the  
> > > > CA should be true??
> > > 
> > > An intermediate certificate is also a CA so intermediate certificates  
> > > also have CA column to be true. End-user certificates should always have  
> > > CA to be false.
> > 
> > My impression was, that the question of the OP was about end-user  
> > certificate and not the intermediate, but i have not closely monitored  
> > the thread.

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 25, 2012, 1:13pm UTC](https://community.ciphermail.com/t/comodo-secure-email-certificate/289/8 "2012-04-25T13:13:44Z")

</div>

> Thanks Martijn,
> 
> Comodo root and intermediate were included in the p7b's of your site.  
> After importing them into the root and certificates store the warning message disappeared.

You can download the Comodo intermediate certificate here

> **[CONTACT US - Comodo: Cloud Native Cyber Security Platform](https://www.comodo.com/contact-us/)**
>
> Please fill in the form if you wish to speak with your region's representative regarding sales, products, services or solutions.

download the COMODOClientAuthenticationandSecureEmailCA certificate and  
import it into the certificates store. Your end-user certificate should  
then be trusted.

Kind regards,

Martijn Brinkers

> **···**
>
> On 04/25/2012 12:41 PM, Perry Peeters wrote:
> 
> > ----------------------------------------------------------------------
> > 
> > Message: 1  
> > Date: Wed, 25 Apr 2012 08:43:51 +0200 (CEST)  
> > From: Perry Peeters\<p.peeters(a)deonet.nl\>  
> > Subject: Comodo secure email certificate  
> > To: users(a)lists.djigzo.com  
> > Message-ID:\<617d4b17-93a7-46eb-acb6-c724b8552dea(a)deolinux1\>  
> > Content-Type: text/plain; charset=utf-8
> > 
> > After buying a secure email certificate from Comodo I imported the certificate  
> > into Djigzo.  
> > The certficate shows up with the following message in the Info column:  
> > "Error building certPath. No issuer ce..."  
> > Also CA shows "false"  
> > What caused this and how can we get this resolved ?
> > 
> > ------------------------------
> > 
> > Message: 2  
> > Date: Wed, 25 Apr 2012 08:52:52 +0200  
> > From: Martijn Brinkers\<martijn(a)djigzo.com\>  
> > Subject: Re: Comodo secure email certificate  
> > To: users(a)lists.djigzo.com  
> > Message-ID:\<4F979F44.1060903(a)djigzo.com\>  
> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> > 
> > On 04/25/2012 08:43 AM, Perry Peeters wrote:
> > 
> > > After buying a secure email certificate from Comodo I imported the certificate  
> > > into Djigzo.  
> > > The certficate shows up with the following message in the Info column:  
> > > "Error building certPath. No issuer ce..."  
> > > Also CA shows "false"  
> > > What caused this and how can we get this resolved ?
> > 
> > Did you install the Comodo root and intermediate certificate? The  
> > warning "no issuer cert.." is shown if the certificate chain (i.e., the  
> > trust chain from certificate to a trusted root) is not complete. You can  
> > import the p7b files with some roots and intermediate certificates from  
> > [http://www.djigzo.com/downloads.html](http://www.djigzo.com/downloads.html) (see certificates). The  
> > intermediates need to be imported into the certificates store and the  
> > roots into the root store. I'm not sure whether the Comodo root and  
> > intermediate certificate(s) are included with the p7b's though.  
> > Alternatively you can export the chain from the system on which the  
> > Comodo certificate is stored and import the chain into DJIGZO.
> > 
> > Kind regards,
> > 
> > Martijn Brinkers
> > 
> > ------------------------------
> > 
> > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_  
> > Users mailing list  
> > Users(a)lists.djigzo.com  
> > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users)
> > 
> > End of Users Digest, Vol 35, Issue 7  
> > \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*  
> > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_  
> > Users mailing list  
> > Users(a)lists.djigzo.com  
> > [http://lists.djigzo.com/lists/listinfo/users](http://lists.djigzo.com/lists/listinfo/users)
