Export p12 with chain but exclude root/anchor

[Gunni]

I want to be able to export PEM or pfx/p12 files but not include the root/anchor certificate.

To prevent Chain issues Contains anchor.

[chris2511]

Which application is it that does not like the root in the chain? Do you have that root-ca already installed in the trust-store of that application? In that case it should simply ignore the root CA

[Gunni]

Web servers aren't supposed to have the root cert and send it because it is assumed that the client already has and trust the root. Openssl is one example btw.