3.20.1 Private key and certificate
Prepare a server private key and the corresponding server certificate.
If the server certificate has been issued by an intermediate certificate authority, you should also prepare all intermediate certificates up to the root certificate. Put all certificates together, including the server certificate, the lower-ranking intermediate certificates, and the higher-ranking intermediate certificates, in that order, and store them in a single file.