Howto add wildcard Comodo SSL certificate

Question

Hi, 
 
 I have a wildcard certificate from Comodo, so i received a package with a certificate.crt / certificate.key and certificate.p7b files. Since its a wildcard i figured i would not have to create a CSR from the XG device. I did add a certificate but it gave me a red cross. So i read some forum posts about getting the Comodo root certificate and install that one first. I did this. Then i added my own certicicate.pem (i concerted it to pem) with my certificate.key file. It still gives me the red cross. 
 What am i doing wrong? 
 Regards, 
 Peter

2ServeErik · Accepted Answer

On my Sophos XG I also have a Comodo wildcard with the same CA as in your first screenshot. I deleted this "Comodo RSA...CA" certificate and a red cross appeared next to my wildcard. 
 I downloaded the file " comodorsadomainvalidationsecureserverca.crt " from the Comodo website and changed (renamed) the file extension to " comodorsadomainvalidationsecureserverca.pem". Then uploaded it to Certificate Authorities in my Sophos XG. On the certificates tab my red cross was gone! 
 So it should work for you to. 
 Try this: 
 1.delete your wildcard certificate 
 2. find the "already existing" CA certificate in the Certificate Authorities Tab and delete that as well 
 3.change the extension of the downloaded " comodorsadomainvalidationsecureserverca.crt " file to .pem and upload it again: Name = Comodo and choose .pem as the Certificate File Format 
 4.add your certificate and wildcard again (try to use the .p7b file you received from Comodo then there's no need to upload your private key separately 
 Good luck

FormerMember · Answer

Hi Kaloian, 
 The red X mark means that the CA is not uploaded. I would request you to check this community link : https://community.sophos.com/products/xg-firewall/f/initial-setup/90379/question-about-certificate-screen . 
 Once you upload CA for that specific certificate, that red X mark will disappear and you should be able to use the certificate for your email server.

rizzah · Answer

Thanks, your trick worked, but i had the wrong certificate. When i googled on: "comodo rsa domain validation secure server ca download" 
 i used this link: https://support.comodo.com/index.php?/Knowledgebase/Article/View/970/108/intermediate-2-sha-2-comodo-rsa-domain-validation-secure-server-ca 
 But this is the wrong certificate. When i got this one: https://static.kinamo.be/crt/comodo/comodorsadvsecureca.crt it all went fine. 
 
 Thanks again!