Article ID: kb00208Last Modified: 06-Oct-2026
Self-Signed Certificate in Certificate Chain
Situation
A firewall returns the following error for an executed backup plan: SSL certificate problem: self-signed certificate in certificate chain.
Cause
The certificate is self-signed, so it is not trusted by default.
Solution
Add Certificate Contents to .cacerts.pem File Manually
To add the contents of the certificate that produced this error, proceed as follows:
- Convert your .cer certificate file to a .pem certificate. To do this, use the following command in a terminal emulator: openssl x509 -in certname.cer -inform DER -out certname.pem -outform PEM
- Open the new file (certname.pem) in any text editor.
- Copy the contents of the file.
- Navigate to /Applications/backupname.app/Contents/Resources/share.
- Find the .cacerts.pem file and open it in a text editor.
- Scroll to the end of the .cacerts.pem file, and paste the certificate contents of the certname.pem file.
- Save the .cacerts.pem file.