Renewing SSL Certificates With Namecheap

Verifying the certificate

• Log in at namecheap.com
• top menu > Hi {username} > Manage SSL Certificates
• Active and expired SSL certificates are listed under Your SSL Certificates

Renewing SSL with Namecheap cPanel

• Log in to cPanel for the site.
• Exclusive for Namecheap customers > Namecheap SSL
• All existing certificates will be listed.
• Click the Install button for the new certificate.

Generating a Certificate Signing Request (CSR)

Creating a new Certificate Signing Request (CSR)

This is only necessary if there is no previous CSR on the server. If one already exists for a domain with a certificate being renewed, it's ok to use the existing CSR.

• Log in to cPanel account
• Security > SSL/TLS Manager
• Private Keys (KEY) > Generate, view, upload, or delete your private keys
• Generate a New Private Key
  • Key Size: (At least 2048 bits)
  • Click Generate
• The next page displays the newly generated private key.
  • Click Return to SSL Manager
• Certificate Signing Requests (CSR) > Generate, view, or delete SSL certificate signing requests
• Generate a New Certificate Signing Request (CSR)
  • Select the private key that was generated earlier from the dropdown list.
  • Enter the following information for the CSR code:
    • City
    • State
    • Country
    • Company
    • Company Division
    • Email
  • Click the Generate button
• The next page displays the newly generated CSR code.
  • This code is used to activate the certificate purchased with Namecheap or any other certificate provider.
• A certificate will be issued, after which it needs to be installed for the site.

Getting the CSR using an existing key

• Log in to cPanel.
• Security > SSL/TLS Manager
• Select the relevant domain from the Keys on Server table > Edit link
• Copy the text following Encoded Private Key:
• Click on the CSR: [domain_name] link at the bottom of the page (right above the "Delete Key" button).
• Copy the text following Encoded CSR:
• This code can be used as the CSR to renew the SSL certificate.

Activating and renewing the certificate

• Log in at namecheap.com
• Account > Dashboard > DOMAIN_NAME (will have SSL listed in the "Expiration" column) > Manage button
• Products tab > positivessl table item listed as "NEWRENEWAL" for the domain/subdomain in question > Activate button
• PositiveSSL Certificate
  • (1) CSR
    • Enter CSR: Paste [#Generating a Certificate Signing Request (CSR)|the CSR generated in cPanel].
    • Primary Domain: Will be prefilled after a valid CSR is entered in the CSR field and focus leaves that field.
    • Server Type: Apache, Nginx, cPanel or other
    • Hashing Algorithm: SHA-2
    • Submit button
• (2)

Legacy instructions

These instructions were created prior to a Namecheap website redesign. They are saved here for legacy purposes only.

• Log in at namecheap.com
• top menu > Hi {username} > Manage SSL Certificates
• Click activate or reissue for the targeted certificate.
• Next page ("SSL Certificate - CSR"): Digital Certificate Order Form
  • Select Web Server: Apache + OpenSSL
  • Copy the CSR string from the CSR stored in the site cPanel.
• Next page: Digital Certificate Order Form
  • Approver Email: Select one, e.g. Whois Record Type, if it's a valid email
• Next page: Enter Contact Information for Your SSL Certificate
  • This will be prefilled with either previous settings, or whois contact information. Make any necessary edits.
  • Click the Submit Order button.
• A SSL Certificate Validation email will be sent to the contact email address.
  • Click the validation link in the email.
  • Submit the validation code from the email.
• Another email containing the SSL Certificate will be sent.

Installing the SSL certificate

• Log in to cPanel.
• Security > SSL/TLS Manager
• Install and Manage SSL for your site (HTTPS) > Manage SSL Sites
  • Copy the certificate code sent from the certificate authority into the Certificate (CRT) field.
    • The code is sent via email from the certificate authority.
    • At the last renewal, the entity sending the code was "Comodo Security Services".
  • Click the Autofill by Certificate button above the CRT field.
    • The Domain and Private Key field values will be filled in.
    • If everything is ok, green checkmarks will be displayed next to all the fields.
    • Click Install Certificate
  • If all goes well, a SSL Certificate Successfully Updated modal dialog is displayed.
    • Click the OK button.
    • The page is refreshed.
    • The domain should be listed under Manage Installed SSL Websites without any errors or warnings.
• Immediately after submitting the certificate, navigating to the secure URL in a browser should not generate any errors.