Problem

* A certificate fails to validate because an intermediate certificate is not present in the gateway. For example, the API Gateway does not ship the Symantec Class 3 Secure Server CA - G4 intermediate certificate by default, so you may see an error like:

ERROR 4/1/15 12:00:00.000 The certificate issuer is not a trusted CA: CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Resolution

-- Locate the proper intermediate certificate and add it to the gateway. Usually, the certificates are made available by the CAs themselves. For example, many VeriSign and Symantec intermediate certs, like the aforementioned Symantec Class 3 Secure Server CA - G4, are available in Symantec's knowledgebase.