Sectigo full chain certificate problem

[cmj01]

Hi all,

I have a Sectigo wildcard certificate that mostly works fine but some apps and services complain that it's untrusted.

The Sectigo recommended solution is to concatenate the wildcard certificate and the intermediate certificate bundle into one file.

If I do that, I can import the certificate into NPM with the corresponding key okay - but then any services I try to sign with that certificate don't work and show offline.

I've managed to update the main certificate store on my unix servers which works too - but quite a lot of docker containers don't use those.

Any advice or words of wisdom?

Many thanks,

Mike