Raritan PX3TS, User Manual

Page: 814 / 842

Appendix I: Additional PX3TS Information
790

If not, you need to find all missing issuer certificates, including
the root certificate, and upload them to PX3TS.
Step 2 -- Find and download the content of missing issuer
certificate(s):
1. View the name of the issuer (CA) at the bottom. In this example, this
issuer is 'Equifax Secure Certificate Authority'.
2. Use the issuer's name 'Equifax Secure Certificate Authority' to
search for its certificate on the Internet, and then download or copy
the content from an authentic source, which is usually its official
website.
Important: To prevent the downloaded certificate from being
modified or manipulated, you must secure the download with TLS via
a trusted certificate.
3. As it is found the Equifax Secure Certificate Authority's certificate is
self signed by 'Equifax Secure Certificate Authority', which indicates
it is the root CA, there are no more missing certificates to search for.
Step 3 -- Upload the missing certificate(s) to PX3TS:
1. Paste the root certificate's content into a plain text file that will be
uploaded to PX3TS.

Content copying must include the lines of "BEGIN CERTIFICATE"
and "END CERTIFICATE".
2. Save that file as a
.pem, .crt or .cer file. In this example, it is named
as "my-root.pem."
3. Upload the file "my-root.pem" to PX3TS for using the GMAIL SMTP
service.
Note: If your SMTP server requires the upload of a certificate file
comprising multiple certificates, make sure the order of these
certificates is correct in the file. See
What is a Certificate Chain
(on
page 783).
IMPORTANT NOTE:
If your SMTP server provides a full certificate chain, you should be
suspicious whether any attacker fakes the certificate chain and doubt
whether the root certificate on that server is authentic. It is STRONGLY
recommended to download the root certificate from an authentic source,
which is usually the root CA's website, rather than from the server you
want to connect.