StartSSL (not self-signed) cert but says "The certificate is not trusted because it is self-signed"

[Victor Porton <porton@xxxxxxxx>]

I've tried to set SSL for one site at my Debian Linux wheezy server (which serves multiple domains).

I've prepared StartSSL keys and certificate and put them into /etc/apache2/ssl/

But when I started the below configuration (with Debian command `a2ensite withoutvowels.conf`), after I opened https://withoutvowels.org/wiki/Without_Vowels_project I've got

[[[[
This Connection is Untrusted

You have asked Iceweasel to connect securely to withoutvowels.org, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

withoutvowels.org uses an invalid security certificate. The certificate is not trusted because it is self-signed. The certificate is only valid for d1stkfactory (Error code: sec_error_unknown_issuer)
]]]]

After this error I've stopped to use the below configuration and replaced it with my old (non-SSL) configuration.

The config /etc/apache2/sites-available/withoutvowels.conf for the site is below:

<VirtualHost *:443>
        ServerName withoutvowels.org

        SuexecUserGroup withoutvowels withoutvowels

        ServerAdmin webmaster@localhost

        SSLEngine on
        SSLProtocol all -SSLv2
        SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
        SSLCertificateFile /etc/apache2/ssl/ssl.crt
        SSLCertificateKeyFile /etc/apache2/ssl/private.key
        SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem

        DocumentRoot /var/www/withoutvowels/web
        <Directory /var/www/withoutvowels>
                Options Indexes SymlinksIfOwnerMatch
                AllowOverride All
                Order allow,deny
                allow from all
        </Directory>

        ErrorLog ${APACHE_LOG_DIR}/error.log

        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn

        CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

<VirtualHost *:80> 
    ServerName www.withoutvowels.org
    Redirect permanent / https://withoutvowels.org/
</VirtualHost> 

<VirtualHost *:443> 
    ServerName www.withoutvowels.org
    Redirect permanent / https://withoutvowels.org/
</VirtualHost> 

<VirtualHost *:80> 
    ServerName withoutvowels.org
    Redirect permanent / https://withoutvowels.org/
</VirtualHost>

-- 
Victor Porton - http://portonvictor.org