Getting intermediate CA certificates
- From the command prompt, change your working directory to 
 <installationDirectory>\AtriumSSO\tomcat\conf.
- Print the signed certificate: keytool -printcert -file <cert_name>.cer
- From the print command output, find the issuer of the certificate.
- Get the Issuer certificate from your CA and enter a certificate file name.
- Repeat step 1 to step 4 until you get a certificate in which both the owner and the issuer are same. 
 Each time, use the latest issuer certificate that you received from the CA.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*
