Thank you, Joshua. It works now.
It turns out that there are 4 certificates in the chain:
1) Class 3 Public Primary Certification Authority
2) VeriSign Class 3 Public Primary Certification Authority – G5
3) VeriSign Class 3 Extended Validation SSL SGC CA
4) www.verisign.com
But it is strange that "VeriSign Class 3 Public Primary Certification Authority – G5" has the same fields in Issuer and
Subject that is characteristic for the self-signed root certificates. That's why I think that it is a last self-signed
root CA. Why in the Issuer field CN of certificate "VeriSign Class 3 Public Primary Certification Authority - G5" is the
same name "VeriSign Class 3 Public Primary Certification Authority - G5", though it is signed with another certificate
"Class 3 Public Primary Certification Authority"?
Also it is strange that no browser has shown the last actual certificate in the
chain, the top root CA.
Regards.
----------------------------------------------------------------------------------------------
From: Joshua Bowman
Sent: Tuesday, June 05, 2012 9:48 AM
To: openssl-users@openssl.org
Subject: Re: Verify return code: 20 (unable to get local issuer certificate)
for www.verisign.com
Sorry, I coped in the wrong cert by mistake, but the right serial number.
-----BEGIN CERTIFICATE-----
MIICPDCCAaUCEHC65B0Q2Sk0tjjKewPMur8wDQYJKoZIhvcNAQECBQAwXzELMAkG
A1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFz
cyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2
MDEyOTAwMDAwMFoXDTI4MDgwMTIzNTk1OVowXzELMAkGA1UEBhMCVVMxFzAVBgNV
BAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAzIFB1YmxpYyBQcmlt
YXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN
ADCBiQKBgQDJXFme8huKARS0EN8EQNvjV69qRUCPhAwL0TPZ2RHP7gJYHyX3KqhE
BarsAx94f56TuZoAqiN91qyFomNFx3InzPRMxnVx0jnvT0Lwdd8KkMaOIG+YD/is
I19wKTakyYbnsZogy1Olhec9vn2a/iRFM9x2Fe0PonFkTGUugWhFpwIDAQABMA0G
CSqGSIb3DQEBAgUAA4GBALtMEivPLCYATxQT3ab7/AoRhIzzKBxnki98tsX63/Do
lbwdj2wsqFHMc9ikwFPwTtYmwHYBV4GSXiHx0bH/59AhWM1pF+NEHJwZRDmJXNyc
AA9WjQKZ7aKQRUzkuxCkPfAyAw7xzvjoyVGM5mKf5p/AfbdynMk2OmufTqj/ZA1k
-----END CERTIFICATE-----
Joshua Bowman
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
