Web Server SSL Certificate Layouts

HAProxy

All of the following in one .pem file:

  1. The Certificate for your domain
  2. The intermediates in ascending order to the Root CA
  3. A Root CA, if any (usually none)
  4. Private Key

Nginx

Two separate files:

  1. The Certificate for your domain, the intermediates, and root CA are in one file
  2. The private key