The cybersecurity crowd loves to pitch certificate automation as some sleek, forward-thinking upgrade for the modern web. But let’s be real: we didn’t get here because everyone suddenly became proactive. We got here because the industry kept messing up. Automation isn’t a reward for good behavior; it’s an intervention. For years,we’ve seen a spectacular parade […]
Certificate automation is a solved problem. The tools exist, the CAs support them, and most IT teams understand the risk of going manual. Yet 38% of organizations still manage certificates with spreadsheets, and 70% admit they don’t have the staff to keep up. The gap between what’s available and what’s adopted isn’t a technical story. […]
The SSL industry already has one countdown on the wall. By 2029, the old annual renewal rhythm will be gone. Certificates will expire faster, automation will be mandatory, and businesses still running on calendar reminders will fall behind. That challenge, at least, is legible. The harder problem is not about time. It’s about visibility. Post-quantum […]
On May 8, 2026, Let’s Encrypt temporarily stopped issuing certificates after detecting an internal error in its certificate system. Existing certificates remained valid, but new requests and automated renewals were affected during the interruption. Service was later restored after Let’s Encrypt changed the affected issuance path. What Happened Inside Let’s Encrypt? The interruption traced back […]
If SSL certificates were only about encryption, the paid market should have collapsed by now. Basic HTTPS is everywhere. Free DV certificates protect ordinary websites. Hosting panels turn SSL into a checkbox. Browsers no longer treat encrypted pages as special; they flag unencrypted ones as broken. Yet paid SSL still exists. The market thrives because […]
Picking a code signing certificate provider is harder than it should be. Four publicly-trusted Certificate Authorities cover almost every legitimate buying scenario: Sectigo, Comodo, DigiCert, and GoGetSSL. At first glance they all look similar. They issue the same X.509 certificates, follow the same CA/Browser Forum rules, and ship hardware tokens that meet the same FIPS […]
SSL certificate validity is changing, and the shift has already started. The industry is moving away from long-lived certificates and toward much shorter lifetimes, forcing a different approach to how you manage SSL/TLS. This is not a minor update. Reduced SSL validity increases the frequency at which you issue certificates, validate domains, and handle renewals. […]
SSL certificates are often treated as a set-and-forget layer of infrastructure. Once installed, browsers stay quiet, and encryption fades into the background. From a support perspective, reality looks very different. Behind routine installations sits a steady flow of tickets where certificates are technically valid, correctly deployed, and still failing in ways that aren’t immediately visible. […]
You’ve just received your SSL certificate files and notice two extensions: .crt and .cer. Your server expects one, your certificate authority (CA) sent the other. Before you start troubleshooting, here’s the short answer: both file extensions hold the same X.509 certificate data, and the difference is mostly a naming convention. But “mostly” is doing some […]
At SSL Dragon, we work with SSL certificates across a wide range of environments, from simple single-domain sites to modern stacks where TLS is deliberately spread across multiple layers. Over time, that range makes one thing clear: TLS itself is stable, but the way it’s understood hasn’t kept pace with its evolution. Today, HTTPS commonly […]
This tutorial explains how to install an SSL certificate on IBM Cloud. IBM Cloud has two infrastructure types, and each handles certificates differently: VPC (Virtual Private Cloud) stores the certificate in Secrets Manager and attaches it to a load balancer, while Classic infrastructure keeps its own SSL certificate store. You will also learn how to […]
This guide shows you how to install an SSL certificate on Heroku. It covers both ways Heroku terminates TLS today: Automated Certificate Management (ACM), which provisions and renews free Let’s Encrypt certificates for you, and manual upload of a third-party certificate via the dashboard or the Heroku CLI.
This tutorial explains how to install an SSL certificate on Google Cloud Platform using Certificate Manager. You will also learn how to generate a CSR (Certificate Signing Request) for Google Cloud, and how to deploy the certificate to an HTTPS load balancer.
This guide shows you how to install an SSL certificate on Google App Engine, both the modern way (a free Google-managed certificate that App Engine provisions and renews automatically for any custom domain) and the legacy way (uploading your own third-party certificate when you need a specific CA, an EV/OV certificate, or a wildcard). App […]
In this guide, you will learn how to install an SSL certificate on WHM (Web Host Manager), the server-level control panel that sits above the individual cPanel accounts. The steps are the same whether you log in as the root administrator or with reseller privileges. The final section covers AutoSSL and the server hostname certificate.
This guide explains how to install an SSL certificate on Virtualmin, the hosting control panel that runs on top of Webmin. You will paste your signed certificate, private key, and CA bundle, apply the certificate to your other services, and verify the result.
This guide shows you how to install an SSL certificate on VestaCP, the Linux control panel. It covers two installations: securing a hosted website through the WEB tab, and replacing the certificate that protects the VestaCP admin panel itself on port 8083.
This guide shows you how to install an SSL certificate on Sentora, the open-source web hosting control panel forked from ZPanel. It covers generating the CSR, pasting the certificate, key, and CA bundle into Sentora’s Apache Admin module, and hardening the resulting virtual host with modern TLS settings.
This guide shows you how to install an SSL/TLS certificate on Plesk. Current Plesk releases ship under the Obsidian line (18.x), so the steps and menu labels below follow that interface. The flow has two phases: upload the issued certificate, the CA chain, and the private key into the certificate store, then assign that certificate […]
In this tutorial, you will learn how to install an SSL certificate on ISPConfig. ISPConfig manages SSL per website: you open the site in the panel, go to its SSL tab, and paste the certificate, private key, and CA bundle into the matching fields. You can also let ISPConfig issue and auto-renew a free Let’s […]
