In this installation tutorial, you will learn how to generate a CSR code and install an SSL Certificate on Google App Engine. You will also learn a few interesting facts about Google App Engine and discover the best place to shop for affordable SSL certificates.

If you’ve already created the CSR Code and received the SSL Certificate from your CA, skip the CSR generation instructions and jump straight to installation guidelines. Use the links below to navigate between sections.

Things you need to configure your SSL certificate
Generate CSR on Google App Engine
Install your SSL certificate on Google App Engine
Google App Engine history
Where to buy the best SSL Certificate for Google App Engine

Things you need to configure your SSL certificate

To install an SSL certificate on Google APP Engine, you need to meet a few requirements. This tutorial assumes that you’ve already done the following:

  • Registered a domain that you’ll use for Web application
  • Pointed the domain name to your App Engine Web Application. This document explains how to add a custom domain for your application.

Generate CSR on Google App Engine

CSR (Certificate Signing Request) is a block of encoded text with your contact data. Certificate Authorities use the CSR to verify and confirm domain and company identity. The quickest way to create a CSR code is via an external tool. You can use our own CSR generator to create your CSR and private key.

Alternatively, you can use your Google Platform account and generate the CSR through the Google Cloud Shell. The Shell command-line console is only available if you’ve already created a project in your account. Assuming that you have a new or existing project here’s how you generate the CSR:

Step 1. Activate Google Cloud Shell

  1. Open the console by clicking the right side Activate Google Cloud Shell button from the top menu bar
  2. The console window will appear at the bottom of your page with the current user’s home directory (/home/user). You can generate the CSR request in the default directory or any other location of your choice.

Step 2. Run the command below to generate your CSR

openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

Note: You should replace the “your domain” value with your real domain name.

Step 3. Enter your contact information

Please enter the data as shown in the examples below:

  • Country Name: enter the two-letter abbreviation code of the country where your business is legally registered (e.g., US).
  • State or Province: provide the name of the state or region where your company is located (e.g., Texas)
  • City or Locality: enter the City where your company is registered (e.g., Austin)
  • Organization Name: enter the full name of your organization. If you have a Domain Validation SSL certificate, you can put NA instead
  • Organizational Unit Name: type NA for Domain Validation certs; otherwise, indicate the department in charge of web security (e.g., IT)
  • Common Name: enter the fully qualified domain name (FQDN) you want to secure. For example, If you have a Wildcard SSL Certificate, add an asterisk in front of your domain name (e.g., *
  • Email address: provide a valid email address
  • A challenge password and an optional company name: skip these fields. Press enter to leave them blank

Double-check the info you’ve just submitted and press Enter. The command will generate your CSR code (csr file), along with your private key (yourdomain.key file)

You can now copy-paste the content of your CSR file including the —–BEGIN CERTIFICATE REQUEST—- and —–END CERTIFICATE REQUEST—-tags during your SSL Certificate order

As for the private key file, you will need it during the SSL installation. Please, save it in a safe directory.

Install your SSL certificate on Google App Engine

After your Certificate Authorities validates your request and delivers all the necessary files to your email, you can begin the installation. Please, follow the steps below:

  1. Log into your Google Cloud account
  2. Navigate to Products and Services > App Engine
  3. From the App Engine menu select Settings > SSL certificates
  4. In the SSL certificates tab, click Upload a new certificate
  5. In the Add a new SSL certificate window you need to upload your certificate and private key file, which was generated along with the CSR. The certificate file (yourdomain.crt) should be combined with the corresponding CA-bundle file ( file with the Intermediate and Root certificates from the Certificate Authority). You can do this by inserting the content of below the certificate code in yourdomain.crt file. Simply paste the whole code from the CA-bundle file right after the —–END CERTIFICATE—— tag in the yourdomain.crt file.
  6. After that, click on the Upload button to complete the installation process.
  7. A page containing SSL installation details will appear. Select the domains you wish to secure under Enable SSL for the following custom domains.
  8. Finally, click Save at the top of the settings screen. Congrats, you’ve successfully installed an SSL certificate on Google App Engine.

You can scan your newly installed SSL certificate for potential errors with the help of these handy SSL tools.

Google App Engine history

Google App Engine is a Platform as a Service and cloud computing platform for developing and hosting web applications in Google-managed data centers. First released in 2008, the App Engine, as it’s often referred to, mainly supports PHP, Java, Python, Node.js, Ruby, and .NET applications. In 2011, App Engine officially left preview and became a fully supported Google product. Check the annotated history of Google’s Cloud Platform for a complete timescale.

Where to buy the best SSL certificate for Google App Engine?

When buying an SSL Certificate, you should consider three crucial aspects: validation type, price, and customer service. At SSL Dragon, we offer an entire range of SSL certificates at affordable prices, backed by excellent customer service! Our SSL certificates are signed by leading Certificate Authorities and are compatible with Google App Engine. Here’s our full list of SSL certificate types:

Don’t know what type of SSL certificate to choose? Use our SSL Wizard and Certificate Filter tools. They will help you find the ideal SSL product for your website.

If you find any inaccuracies, or you have details to add to these SSL installation instructions, please feel free to send us your feedback at [email protected] Your input would be greatly appreciated! Thank you.