# Cannot PullHotlinkedImages for some domains

**URL:** <https://meta.discourse.org/t/cannot-pullhotlinkedimages-for-some-domains/221340>\
**Category:** Product Support\
**Created:** [March 13, 2022, 4:18pm UTC](https://meta.discourse.org/t/cannot-pullhotlinkedimages-for-some-domains/221340 "2022-03-13T16:18:52Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)\
**Post date:** [March 16, 2022, 4:18pm UTC](https://meta.discourse.org/t/cannot-pullhotlinkedimages-for-some-domains/221340/9 "2022-03-16T16:18:19Z")

</div>

The image fails to download because the [www.serial-kombi.com](http://www.serial-kombi.com) webserver is misconfigured. It’s sending an incomplete certificate chain. The intermediate certificate is missing.

Most browsers probably have the “Sectigo RSA Organization Validation Secure Server CA” intermediate certificate cached from another site, so it’s not an obvious issue. The download fails, because AFAIK OpenSSL doesn’t have such a cache. It requires the server to send it.

See for yourself in the [SSL Server Test for www.serial-kombi.com](https://www.ssllabs.com/ssltest/analyze.html?d=www.serial-kombi.com&hideResults=on). It reports an incomplete certificate chain.

---

_[View the full topic](https://meta.discourse.org/t/cannot-pullhotlinkedimages-for-some-domains/221340)._