Renewing SSL Certificates With Namecheap

Verifying the certificate

• Log in at namecheap.com
• top menu > Hi {username} > Manage SSL Certificates
• Active and expired SSL certificates are listed under Your SSL Certificates

Renewing SSL with Namecheap cPanel

• Log in to cPanel for the site.
• Exclusive for Namecheap customers > Namecheap SSL
• All existing certificates will be listed.
• Click the Install button for the new certificate.

Generating a Certificate Signing Request (CSR)

Creating a new Certificate Signing Request (CSR)

It is not strictly necessary to generate a new CSR if one already exists for a given domain on the server. However, the recommendation is to generate a new CSR each time a certificate is renewed. If one already exists for a domain with a certificate being renewed, it's ok to use the existing CSR.

• Log in to cPanel account
• Security > SSL/TLS Manager
• Private Keys (KEY) > Generate, view, upload, or delete your private keys
• Generate a New Private Key
  • Key Size: (At least 2048 bits)
  • Description: Something that will identify which certificate is using the key, e.g. [DOMAIN_NAME] ([MM/YYYY])
  • Click Generate
• The next page displays the newly generated private key.
  • Click Return to SSL Manager
• Certificate Signing Requests (CSR) > Generate, view, or delete SSL certificate signing requests
• Generate a New Certificate Signing Request (CSR)
  • Key Select the private key that was generated earlier from the dropdown list.
  • Domains Enter the subdomain that will be using the SSL certificate
  • City
  • State
  • Country
  • Company
  • Company Division not required
  • Email
  • Passphrase not required
  • Description not required
  • Click the Generate button
• On the following page copy the text following Encoded Certificate Signing Request: This text is what is needed to enter as the CSR for the SSL certificate.
• A certificate will be issued, after which it needs to be installed for the site.

Getting the CSR using an existing key

• Log in to cPanel.
• Security > SSL/TLS Manager
• Select the relevant domain from the Keys on Server table > Edit link
• Copy the text following Encoded Private Key:
• Click on the CSR: [domain_name] link at the bottom of the page (right above the "Delete Key" button).
• Copy the text following Encoded CSR:
• This code can be used as the CSR to renew the SSL certificate.

Activating and renewing the certificate

• Log in at namecheap.com
• Account > Dashboard > DOMAIN_NAME (will have SSL listed in the "Expiration" column) > Manage button
• Products tab > positivessl table item listed as "NEWRENEWAL" for the domain/subdomain in question > Activate button
• PositiveSSL Certificate
  • (1) CSR
    • Enter CSR: Paste [#Generating a Certificate Signing Request (CSR)|the CSR generated in cPanel].
    • Primary Domain: Will be prefilled after a valid CSR is entered in the CSR field and focus leaves that field.
    • Server Type: Apache, Nginx, cPanel or other
    • Hashing Algorithm: SHA-2
    • Submit button
• (2)

Legacy instructions

These instructions were created prior to a Namecheap website redesign. They are saved here for legacy purposes only.

• Log in at namecheap.com
• top menu > Hi {username} > Manage SSL Certificates
• Click activate or reissue for the targeted certificate.
• Next page ("SSL Certificate - CSR"): Digital Certificate Order Form
  • Select Web Server: Apache + OpenSSL
  • Copy the CSR string from the CSR stored in the site cPanel.
• Next page: Digital Certificate Order Form
  • Approver Email: Select one, e.g. Whois Record Type, if it's a valid email
• Next page: Enter Contact Information for Your SSL Certificate
  • This will be prefilled with either previous settings, or whois contact information. Make any necessary edits.
  • Click the Submit Order button.
• A SSL Certificate Validation email will be sent to the contact email address.
  • Click the validation link in the email.
  • Submit the validation code from the email.
• Another email containing the SSL Certificate will be sent.

Installing the SSL certificate

• Log in to cPanel.
• Security > SSL/TLS Manager
• Install and Manage SSL for your site (HTTPS) > Manage SSL Sites
  • Copy the certificate code sent from the certificate authority into the Certificate (CRT) field.
    • The code is sent via email from the certificate authority.
    • At the last renewal, the entity sending the code was "Comodo Security Services".
  • Click the Autofill by Certificate button above the CRT field.
    • The Domain and Private Key field values will be filled in.
    • If everything is ok, green checkmarks will be displayed next to all the fields.
    • Click Install Certificate
  • If all goes well, a SSL Certificate Successfully Updated modal dialog is displayed.
    • Click the OK button.
    • The page is refreshed.
    • The domain should be listed under Manage Installed SSL Websites without any errors or warnings.
• Immediately after submitting the certificate, navigating to the secure URL in a browser should not generate any errors.