hero-faq-1

FAQs

All Business Validation Certificate Authorities Changes Code Signing Configuration CPAC CSR Code CSR Decoder CSR Generation Tutorials CSR Generator DigiCert Domain Validation Extended Validation General Install SSL Certificates Installation IP Address LEI Multi Domain Payments Private Key Renewal S/MIME Types Updates Wildcard
How do I know if SSL is enabled in cPanel?

Use cPanel’s search function to look for your domain’s SSL certificate details. Click on the Gear icon to view the Advanced Settings, and exclude AutoSSL if you use a third-party SSL certificate. The Domains Table will display a list of certificates used by your domains, including their type and status.

Copy Link

Where are SSL certificates stored in cPanel?

SSL certificates are stored on your server. 

In Apache, the SSL file may be called httpd. conf, apache2. conf or ssl. conf and may be located at /etc/httpd/, /etc/apache2/ or /etc/httpd/conf. 

In Nginx, the certificates will be stored under /etc/nginx/ssl.

Copy Link

How do I change my SSL certificate in cPanel?

Once the certificate expires, you have to buy a new one and install it again on your server. If you’re using cPanel,  repeat our installation instructions for your new certificate.

Copy Link

How do I download OpenSSL on CentOS?

Open SSL comes pre-installed in all Linux distributions, including CentOS. Learn more about OpenSSL and its command lines.

Copy Link

Where are SSL certificates stored in CentOS?

By default, the SSL certificates on CentOS are stored in the /etc/pki/tls/certs/ directory. The private keys reside in /etc/pki/tls/private/ directory.

Copy Link

How do I know if an SSL certificate is installed on CentOS?

To check the SSL certificate on CentOS, use the following OpenSSL command:

openssl x509 -text -in certificate.crt -noout

Copy Link

Where is the SSL .conf file in Apache?

The conf. file may reside in different locations depending on your OS and configuration. Check the httpd.conf, apahce2.conf or ssl.conf in one of the following directories: etc/httpd/, /etc/apache2/ or /etc/httpd/conf.d/ssl.conf

Copy Link

How do I know if Apache SSL is enabled?

For Debian and Ubuntu distributions, use the following commands

#grep -ir SSLProtocol /etc/apache2/*

/etc/apache2/mods-available/ssl.conf:SSLProtocol +TLSv1.2 +TLSv1.3

Copy Link

What is SSL in Apache?

SSL (Secure Sockets Layer), now TLS (Transport Layer Security), is a cryptographic protocol that encrypts communications between two network endpoints, for instance, a web server such as Apache and users’ browsers.

Copy Link

I cannot choose the domain validation method

When configuring, reissuing, or renewing your SSL Certificate, if you cannot choose the domain validation method, or you encounter an error message, it means there is a CSR error. Here are the most common CSR errors, and the ways to fix them:

  • If you have a Wildcard SSL Certificate (for multiple sub-domains), then the common name in your CSR should start with an asterisk and a dot (*.) as in this example *.website.com. For regular, non-wildcard SSL Certificates, the common name should have one of the following formats: website.com, www.website.com or my.website.com.
  • Wrong Key Encryption (e.g. 4096 bit). Please make the Key Encryption 2048 bit.
  • Your CSR is password protected. Please disable the password so that the Certificate Authority issuing the SSL Certificate can read the CSR code.
  • The CSR code is missing some required fields or information. You can find the complete list of fields on our CSR Generator.
  • Your CSR may have other information that is incorrect or not allowed. Please see this FAQ article with details on allowed information and formatting.

To fix your CSR code you need to generate a new one. After that, try configuring or reissuing your SSL Certificate with the new CSR code. If the problem persists, please open a ticket with us and send us your the CSR code. We will decode the CSR and tell you what the problem is, so that you can fix it.

Copy Link