Open the keystore using KeyStore Explorer
Right-Click on the keypair, and choose to Export > Certificate Chain
Open Internet Explorer and go to :
Tools
Internet Options
Content
Certificates
Import
Select the certificate you were sent from your CA (save in Other People).
Once imported, export the certificate as a .p7b file with the "include any intermediate certificates" option checked.
Go back to the KeyStore Explorer and right click on *.example-cloud.com and select Import CA Reply.
Right-click on the keypair and choose View Details > Certificate Chain Details.
Verify the full certificate chain is there. The full chain should include the Root, Intermediate, and Server certificates. Depending on your CA, you might have multiple Intermediate certificates.
Right-click on the keypair and choose Edit Cert Chain > Remove Certificate.
This will remove the Root certificate from the chain, as some browsers interpret providing the certificate as being Self-signed if the root certificate is provided.
Right-click on the keypair and choose View Details > Certificate Chain Details.
Verify the certificate chain is there, minus the Root certificate. The chain should include only the Intermediate, and Server certificates. Depending on your CA, you might have multiple Intermediate certificates.
Save keystore and copy to relay to test.