---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Maintaining certificate chain relationships

# Maintaining certificate chain relationships {#ariaid-title1}

Release version: Brazil  
Updated July 31, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Maintaining certificate chain relationships via certificate import verifies the integrity and security of digital certificates, validating their authenticity in a system.

When you run certificate discovery by importing certificate files, the file extension and the order of
the certificates within the file determine whether the system can build the chain relationships between the server, intermediate, and root certificates. This behavior applies only to certificates discovered through certificate file
import. For information about this discovery method, see [Run Certificate Discovery via certificate file import](https://www.servicenow.com/docs/QjTAaIi2iPDaD07EVTZfeQ "In Certificate Inventory and Management, you can discover certificates by importing certificate files into the system using pattern-based Discovery.").  
Only files with the `.txt` extension preserve certificate chain relationships. Certificates in a `.txt` chain file must appear in this order: Server certificate, intermediate certificate, and root certificate.The following outcomes apply when a file doesn't meet these requirements:{#maintain-cert-chain-relationships__table_gyc_ypn_nkc__entry__2}

| File contents | Result |
|-|-|
| Two or more certificates in a format, such as `.cert` or `.pem` | The system processes only the first certificate. It doesn't process the remaining certificates and doesn't build chain relationships. |
| A `.txt` file with one certificate | The system treats the certificate as a server certificate and doesn't build chain relationships. |
| A `.txt` file with two certificates | The system treats the first certificate as the server certificate and the second as the root certificate. The chain contains no intermediate certificate. |
[ ]

{#maintain-cert-chain-relationships__table_gyc_ypn_nkc}  
Note:  
Certificate chain relationships depend on the most recent URL or IP discovery run. If you import a file that doesn't contain chain relationships, the system removes any existing chain relationships for a certificate with the same certificate fingerprint.