Sorry, I was confused a bit a have already intermidiate certificate, which was(I suppose) issued by comodo. I do openssl s_client -connect www.host.com:443 And it returns errors Verify return code: 21 (unable to verify the first certificate) Posted at Nginx Forum: http://forum.nginx.org/read.php?2,11441,11473#msg-11473