Invalid Heroku Certificates

Question

I am not very good at ssl and certs in general, as I just recently started to "really" work with them and understand them. I have a problem.

I am posting a library for Android that connects to a specific "derp.com" domain. Each of my clients receives a subdomain to access the library. EG "customer.derpy.com"

Thus, working with https on android can be a pain, but this is not the end of the world. I am having problems when all devices using https servers do not trust my certificate. I suspect that is why:

heroku certs --app my-app Endpoint Common Name(s) Expires Trusted ------------------------ ---------------------------- -------------------- ------- cdepy412532.herokussl.com *.derp.com, derp.com 2013-04-05 22:36 UTC False 

The certificate is marked as untrusted. I suspect this is causing the problem, as the devices complain that they cannot verify the certificate. Why should it be?

---

Certificate issued approx. I think this is either rapidssl or geotrust.

Answer 1

I hate answering my question and delete it soon, but it can help someone else.

In my case, the problem is that I forgot to combine the intermediate certificate with the root certificate.

This tutorial by Ryan McGeary has been of great help.

My only advice is to make sure that you have intermediary certificates (pem or crt), root certificates (pem or crt) and the private key (key) from your boss or the one who received them. If you do not have them, you will receive an unreliable certificate for the hero.