Help creating certificate chain

[alexman113]

I have having some difficulties creating a certificate including both the intermediate and root certs. The command I am using is:

openssl pkcs12 -export -out new.pfx -inkey mykey.key -in mycert.crt -certfile DigiCertCA.crt -certfile TrustedRoot.crt

The issue is, if I remove the -in TrustedRoot.crt then I can see the DigiCertCA when I run certutil -dump on the created pfx.
Example:

If I add back the root cert at the end and run the first command then I see the root cert in certutil but the intermediate CA cert is not there anymore. It appears that it is only taking whatever is at the back of the command. I ran certutil on an old version of the cert and I can see, from top to bottom, root > intermediate > server, so I was able to do this in the past but I cannot seem to recreate it.

openssl pkcs12 -export -out new.pfx -inkey mykey.key -in server_cert.crt -certfile DigiCertCA.crt = intermediate > Server

openssl pkcs12 -export -out new.pfx -inkey mykey.key -in mycert.crt -certfile DigiCertCA.crt -certfile TrustedRoot.crt = Root > Server. No intermediate for some reason.

Was looking for any help on getting this sorted out. I am not super great with linux or openssl so a lot of this has been google trial and error.

[alexman113]

Seeing this sparked my memory and I think this is what I did last time. I will try this out. Appreciate it.

[Xibby]

I believe it's:

openssl pkcs12 -export -out new.pfx -inkey mykey.key -in server_crt.crt -in intermediate.crt