If the domain is hosted with us, you can skip this article: we set up and install the certificate automatically. Use these steps when your website is hosted somewhere else.
1. Create a CSR on your web server
A CSR (Certificate Signing Request) is a block of text your web server generates. It creates a matching private key, which stays on your server. Create the CSR on the server where the certificate will be installed, or ask your host to do it.
- On cPanel: see Create a CSR for a Paid SSL Certificate.
- Include the domain exactly as you want it secured, for example
www.yourdomain.com. Standard certificates also cover the version withoutwww. - For OV and EV certificates, the organization name, city, state and country must match your legal business details.
Important: Keep the private key. The certificate only works with the key that was created with your CSR.
2. Configure the certificate
- Open the configuration link in the email we sent after your order. Or, in the Client Area, go to Services > My Services, open the certificate and click Configure Now under Actions.
- Choose your server type, paste the whole CSR (including the
-----BEGINand-----ENDlines) and click Next. - Check the administrator contact details.
- Choose how to prove you control the domain (see below) and submit.
3. Prove you control the domain
| Method | What you do | Good to know |
|---|---|---|
| Click the approval link sent to an address such as admin@ or webmaster@ your domain. | That mailbox must exist and receive mail. This is the only method allowed for a reissue. | |
| DNS | Add the TXT or CNAME record you're given at your DNS provider. | Copy it exactly. Required for wildcard certificates. See TXT Records. |
| HTTP file | Upload the file you're given to /.well-known/pki-validation/ on your site. | It must open publicly without a password or redirect, on the exact domain being secured. Not available for wildcards. |
DV certificates are usually issued within minutes of validation. OV and EV also need the organization checks, which take one to a few business days.
4. Get and install the certificate
- Open the certificate in the Client Area and choose Retrieve Certificate from its actions. It's also emailed to you.
- Install the certificate and the intermediate (CA bundle) on your web server. For the bundle, see Get the Intermediate CA Bundle for an SSL Certificate.
- Test your site with an online SSL checker to make sure the chain is complete.
Tip: Because certificates are now reissued several times during your term, you'll need to install each new one on your server. Put a reminder in your calendar when you get the reissue email.
Problems? See Pending Validation, Reissues and Renewals.
