Renewing SSL Certificates With Namecheap: Difference between revisions

From Littledamien Wiki
Jump to navigation Jump to search
Line 13: Line 13:
* Click the '''Install''' button for the new certificate.
* Click the '''Install''' button for the new certificate.


== Create a Certificate Signing Request (CSR) ==
== Generating a Certificate Signing Request (CSR) ==


<p class="alert-info">This is only necessary if there is no previous CSR on the server. If one already exists for a domain with a certificate being renewed, it's ok to use the existing CSR.</p>
=== Creating a new Certificate Signing Request (CSR) ===
 
<p class="alert alert-info">This is only necessary if there is no previous CSR on the server. If one already exists for a domain with a certificate being renewed, it's ok [[#Getting the CSR using an existing key|to use the existing CSR]].</p>


* Log in to cPanel account
* Log in to cPanel account
Line 38: Line 40:
* The next page displays the newly generated CSR code.  
* The next page displays the newly generated CSR code.  
** This code is used to activate the certificate purchased with Namecheap or any other certificate provider.
** This code is used to activate the certificate purchased with Namecheap or any other certificate provider.
* A certificate will be issued, after which it needs to be installed for the site.<ref>[https://www.namecheap.com/support/knowledgebase/article.aspx/9445/0/cpanel Generating a CSR using cPanel] (Namecheap knowledgebase)</ref>  
* A certificate will be issued, after which it needs to be installed for the site.<ref>[https://www.namecheap.com/support/knowledgebase/article.aspx/9445/0/cpanel Generating a CSR using cPanel], Namecheap knowledgebase</ref>
 
=== Getting the CSR using an existing key ===
 
* Log in to cPanel.
* '''Security''' > '''SSL/TLS Manager'''
* Select the relevant domain from the '''Keys on Server''' table > '''Edit''' link
* <strike>Copy the text following '''Encoded Private Key:'''</strike>
* Click on the '''<nowiki>CSR: [domain_name]</nowiki>''' link at the bottom of the page (right above the "Delete Key" button).
* Copy the text following '''Encoded CSR:'''
* This code can be used as the CSR to renew the SSL certificate. <ref>[https://www.namecheap.com/support/knowledgebase/article.aspx/9445/0/cpanel Generating a CSR using cPanel], Namecheap Knowlegebase</ref>


== Activating and renewing the certificate ==
== Activating and renewing the certificate ==

Revision as of 17:25, 4 April 2017

Verifying the certificate

  • Log in at namecheap.com
  • top menu > Hi {username} > Manage SSL Certificates
  • Active and expired SSL certificates are listed under Your SSL Certificates

Renewing SSL with Namecheap cPanel

  • Log in to cPanel for the site.
  • Exclusive for Namecheap customers > Namecheap SSL
  • All existing certificates will be listed.
  • Click the Install button for the new certificate.

Generating a Certificate Signing Request (CSR)

Creating a new Certificate Signing Request (CSR)

This is only necessary if there is no previous CSR on the server. If one already exists for a domain with a certificate being renewed, it's ok to use the existing CSR.

  • Log in to cPanel account
  • Security > SSL/TLS Manager
  • Private Keys (KEY) > Generate, view, upload, or delete your private keys
  • Generate a New Private Key
    • Key Size: (At least 2048 bits)
    • Click Generate
  • The next page displays the newly generated private key.
    • Click Return to SSL Manager
  • Certificate Signing Requests (CSR) > Generate, view, or delete SSL certificate signing requests
  • Generate a New Certificate Signing Request (CSR)
    • Select the private key that was generated earlier from the dropdown list.
    • Enter the following information for the CSR code:
      • City
      • State
      • Country
      • Company
      • Company Division
      • Email
    • Click the Generate button
  • The next page displays the newly generated CSR code.
    • This code is used to activate the certificate purchased with Namecheap or any other certificate provider.
  • A certificate will be issued, after which it needs to be installed for the site.[1]

Getting the CSR using an existing key

  • Log in to cPanel.
  • Security > SSL/TLS Manager
  • Select the relevant domain from the Keys on Server table > Edit link
  • Copy the text following Encoded Private Key:
  • Click on the CSR: [domain_name] link at the bottom of the page (right above the "Delete Key" button).
  • Copy the text following Encoded CSR:
  • This code can be used as the CSR to renew the SSL certificate. [2]

Activating and renewing the certificate

  • Log in at namecheap.com
  • Account > Dashboard > DOMAIN_NAME (will have SSL listed in the "Expiration" column) > Manage button
  • Products tab > positivessl table item listed as "NEWRENEWAL" for the domain/subdomain in question > Activate button


Legacy instructions

These instructions were created prior to a Namecheap website redesign. They are saved here for legacy purposes only.
  • Log in at namecheap.com
  • top menu > Hi {username} > Manage SSL Certificates
  • Click activate or reissue for the targeted certificate.
  • Next page ("SSL Certificate - CSR"): Digital Certificate Order Form
    • Select Web Server: Apache + OpenSSL
    • Copy the CSR string from the CSR stored in the site cPanel.
  • Next page: Digital Certificate Order Form
    • Approver Email: Select one, e.g. Whois Record Type, if it's a valid email
  • Next page: Enter Contact Information for Your SSL Certificate
    • This will be prefilled with either previous settings, or whois contact information. Make any necessary edits.
    • Click the Submit Order button.
  • A SSL Certificate Validation email will be sent to the contact email address.
    • Click the validation link in the email.
    • Submit the validation code from the email.
  • Another email containing the SSL Certificate will be sent.

Installing the SSL certificate

  • Log in to cPanel.
  • Security > SSL/TLS Manager
  • Install and Manage SSL for your site (HTTPS) > Manage SSL Sites
    • Copy the certificate code sent from the certificate authority into the Certificate (CRT) field.
      • The code is sent via email from the certificate authority.
      • At the last renewal, the entity sending the code was "Comodo Security Services".
    • Click the Autofill by Certificate button above the CRT field.
      • The Domain and Private Key field values will be filled in.
      • If everything is ok, green checkmarks will be displayed next to all the fields.
      • Click Install Certificate
    • If all goes well, a SSL Certificate Successfully Updated modal dialog is displayed.
      • Click the OK button.
      • The page is refreshed.
      • The domain should be listed under Manage Installed SSL Websites without any errors or warnings.[3]
  • Immediately after submitting the certificate, navigating to the secure URL in a browser should not generate any errors.

Notes