Include the intermediate certificate in your certificate chain and it should fix gk1's issue. You want the one labelled "extra download" here: https://www.ssllabs.com/ssltest/analyze.html?d=ballisticfina...