FAQs

Yes, you can change the domain name that your SSL Certificate is issued to. The procedure involves the reconfiguration and reissue of your SSL Certificate, and there are some additional steps if you have a Business Validation or Extended Validation Certificate.

Domain Validation SSL Certificates

You can reissue your SSL Certificate from your SSL Dragon account by following the next steps:
1) Log into your SSL Dragon account;
2) Go to “SSL Certificates” -> “My SSL Certificates“;
3) You will see the list of products that you bought from SSL Dragon. Click on the SSL Certificate which you would like to reissue;
4) Click on the “Reissue certificate” button on the left side (see the screenshot on the right);
5) Reconfigure your SSL Certificate. As a part of the reconfiguration, please create a new CSR code and enter the new domain name in it.
6) For Multi-Domain SSL – Don’t forget to include the SAN list in the SANs field;
7) After reconfiguring your SSL Certificate, you will have to pass the Domain Validation again.

For Domain Validation SSL Certificates, your SSL Certificate will be reissued for the new domain name after you pass the domain validation successfully.

Business Validation SSL Certificates

To change the domain name in your Business Validation SSL Certificate, you have to go through the same reconfiguration and domain validation process as described under the “Domain Validation” section above. After that, you have to pass the entire Business Validation process again, so as the Certificate Authority needs to verify the legal existence of your domain name, company, and your company’s phone number. You can read how to pass the Business Validation process at this link.

Your BV SSL Certificate will be reissued for the new domain name after you pass the Business Validation process again.

Extended Validation SSL Certificates

To change the domain name in your Extended Validation SSL Certificate, you have to go through the same reconfiguration and domain validation process as described under the “Domain Validation” section above. After that, you have to pass the entire Extended Validation process again, so as the Certificate Authority needs to verify the legal existence of your domain name, company, and your company’s phone number. You can read how to pass the Extended Validation process at this link.

Your EV SSL Certificate will be reissued for the new domain name after you pass the Extended Validation process again.

Copy Link

Two great tools to check how well your SSL Certificate is installed are:
1) SSL Server Test
2) Why No Padlock?

You only have to paste your https URL to get a free report and an A++ to F grade on your SSL Certificate installation. These tools will tell you what are the vulnerabilities of your SSL Certificate installation, and will offer you detailed information on how to fix them.

We also recommend you to read our article called: How to move your website from HTTP to HTTPS easily and with no pain.

Copy Link

You can contact the Certificate Authorities directly when you have any questions related to your SSL Certificates. You can contact them anytime, either by phone or email, or better – by using the Live Chat feature.

Please don’t forget to mention your Partner Order ID, which you can find on the SSL Certificate’s details page inside your SSL Dragon account (see screenshot on the right).

Here is the contact information of all Certificate Authorities we collaborate with:

Sectigo/GoGetSSL

Live Status Checker: https://secure.trust-provider.com/products/ORDERSTATUSCHECKER

Live Chat & Ticket System: https://sectigo.com/support

Phone (USA): +1 (888) 266-6361
Phone (International): +1 (914) SECTIGO (732-8446)

More contact information on Sectigo’s official website

Thawte

Online chat: https://www.thawte.com/chat/chat_sales.html

Phone (USA): +1 (888) 484 2983
Phone (UK): +44 203 450 5486
Phone (Australia & Asia Pacific): +61 3 9914 5641

More contact information on Thawte’s official website

GeoTrust

Online chat: https://www.geotrust.com/support/chat/

Phone (USA): +1 (866) 511-4141
Phone (UK): +44 203 0240907
Phone (Australia): +61 3 9914 5661

More contact information on GeoTrust’s official website

RapidSSL

Online chat: https://www.rapidssl.com/chat/intro.html

Phone (USA): +1 (866) 795-4669
Phone (Europe, UK, Australia): +44 203 024 0906

DigiCert

Phone (USA): +1 (801) 701-9600
More contact information on DigiCert’s official website

Copy Link

You can download the SSL Certificate directly from the SSL Certificate page within your SSL Dragon account.

Simply use the Download Intermediate/Chain and Download Certificate buttons.

Or you can use the Send Certificate button, too.

We provide you the SSL Certificate in the exact same format in which we get it from the Certificate Authority.

Also, you can use any text editing tool such as Notepad and create the actual files that you need:

Go to your SSL Dragon account, then to your SSL Certificate details page, you will find the 3 large pieces of codes that your SSL Certificate is made of:

1. The CSR code is the one which you generated along with your Private Key, and which you used to configure your SSL Certificate. If you need this code as a file, you can copy and paste this code in Notepad, and then save it as a .csr format file.
2. The CRT code which is your actual SSL Certificate code. Save this one as a .crt format file.
3. The CA Bundle code has the root and intermediate certificates in it. Save this one as a .ca-bundle format file.

You won’t be able to find your Private Key inside your SSL Dragon account, because we don’t have it, and we don’t store it. Private Keys are private, and it is only you who should have it. If you cannot find your Private Key, we recommend reading this article so as it may help you to find it, or generate a new one.

Copy Link

If you go to your SSL Dragon account, then to your SSL Certificate details page, you will find the 3 large pieces of codes that your SSL Certificate is made of:

1) The CSR code is the one that you generated along with your Private Key, and which you used to configure your SSL Certificate
2) The CRT code which is your actual SSL Certificate code
3) The CA Bundle code contains the root and intermediate certificates in it

Also, listed below you will find all the Sectigo Root and Intermediate CA certificates and the bundle files required to complete the SSL certificate installation across various servers and email clients.

DV ECC Files

• Sectigo ECC DV CA – TXT file
• USERTrust ECC CA – TXT file
• ECC DV Bundle – TXT file

DV RSA files

• Sectigo RSA DV CA – TXT file
• USERTrust RSA CA – TXT file
• RSA DV Bundle – TXT file
• RSA DV Bundle with SHA-1 – TXT file – includes SHA-1 AddTrust External Root CA required for legacy platforms and Zimbra.

OV ECC files

• Sectigo ECC OV CA – TXT file
• USERTrust ECC CA – TXT file
• ECC OV Bundle – TXT file

OV RSA files

• Sectigo RSA OV CA – TXT file
• USERTrust RSA CA – TXT file
• RSA OV Bundle – TXT file
• RSA OV Bundle with SHA-1 – TXT file – includes SHA-1 AddTrust External Root CA required for legacy platforms and Zimbra.

EV ECC files

• Sectigo ECC EV CA – TXT file
• USERTrust ECC CA – TXT file
• ECC EV Bundle – TXT file

EV RSA files

• Sectigo RSA EV CA – TXT file
• USERTrust RSA CA – TXT file
• RSA EV Bundle – TXT file
• RSA EV Bundle with SHA-1 –  TXT file – includes SHA-1 AddTrust External Root CA required for legacy platforms and Zimbra.

Code Signing – Intermediate

Standard

• Sectigo RSA Code Signing CA – TXT file

EV Code Signing

• Sectigo RSA Extended Validation Code Signing CA – TXT file

For Code Signing Certificates, issued on or after June 1, 2021

Standard

• Sectigo Public Code Signing CA R36 – TXT file
• SectigoPublicCodeSigningRootR46_AAA [ Cross Signed ] – TXT file

EV Code Signing

• Sectigo Public Code Signing CA EV R36 – TXT file
• SectigoPublicCodeSigningRootR46_AAA [ Cross Signed ] – TXT file

Secure Email 

• Sectigo RSA Client Authentication and Secure Email CA – TXT file

Note: Few legacy systems that no longer receive updates from their vendor may not trust Sectigo SHA-2 Certificates. To enable them to trust the SHA-2 Certificates, Sectigo recommends including the Cross Signed Certificate into the Server Certificate chain. This will enable those legacy systems to trust the SHA-2 Certificates.

Source: Sectigo’s Knowledge Base

Copy Link

You can get the SSL Certificate from your SSL Dragon account by following the next steps:
1) Log into your SSL Dragon account;
2) Go to SSL Certificates;
3) Then go to My SSL Certificates;
4) You will see the list of products which you bought from us. Click on the SSL Certificate which you bought;
5) When you are on the SSL Certificate page, scroll down, and you will see the codes that the SSL Certificate is made of.

The 3 large pieces of codes that you will see are:
1) The CSR code is the one that you generated along with your Private Key, and which you used to configure your SSL Certificate. If you need this code as a file, you can copy and paste this code in Notepad, and then save it as a .csr format file.
2) The CRT code which is your actual SSL Certificate code. Save this one as a .crt format file.
3) The CA Bundle code has the root and intermediate certificates in it. Save this one as a .ca-bundle format file.

You won’t be able to find your Private Key inside your SSL Dragon account, because we don’t have it, and we don’t store it. Private Keys are private, and it is only you who should have it. If you cannot find your Private Key, we recommend reading this article so as it may help you to find it, or generate a new one.

Copy Link

After installing an SSL Certificate on your website, you can also let your visitors and customers know that your website is secure by adding a site seal somewhere on a prominent place on your website. You can choose to place the site seal in the footer of your website, or on the checkout page where customers have to enter their credit card information, or in both these places.

Site seals are of two types: static and dynamic. All Domain Validation SSL Certificates come with a static site seal, which is basically an image. All Business Validation and Extended Validation SSL Certificates come with a dynamic site seal that can be hovered or clicked on, and they will show the name of your company, will confirm that your website was issued a legitimate SSL Certificate, and will prove that your website belongs to your company.

Site Seals for RapidSSL SSL Certificates 

If you purchased an SSL issued by RapidSSL, you can get your site seal at the following link:
https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&id=SO14424

Site Seals for GeoTrust SSL Certificates 

If you purchased an SSL issued by GeoTrust, you can get your site seal at the following link:
https://www.geotrust.com/support/seal/agreement/installation-instructions/

Site Seals for Thawte SSL Certificates 

If you purchased an SSL issued by Thawte, you can get your site seal at the following link:
https://www.thawte.com/ssl/secured-seal/installation-agreement/

Site Seals for DigiCert SSL Certificates 

If you purchased an SSL issued by DigiCert, you can get your site seal at the following link:
https://www.digicert.com/site-seal-conversion-rate-benefits.htm

Sectigo Site Seals 

If you purchased a Sectigo SSL  you can download the dynamic site seal at the following link:  https://sectigo.com/trust-seal

GoGetSSL Site Seals 

If you purchased a GoGetSSL SSL  you can download the dynamic site seal at the following link https://www.gogetssl.com/wiki/installation/gogetssl-site-seal-installation/

Copy Link

You can secure inexpensively and efficiently multiple domains and/or sub-domains with a Multi-Domain (SAN) SSL Certificate. Depending on the SSL Certificate brand and certificate product, the SAN cert will include a different number of additional domains at the price quoted on the SSL Certificate’s details page (see screenshot on the right).

You can find our full list of Multi-Domain (SAN) SSL Certificates at this link.

Copy Link

There are many different ways to install an SSL Certificate, and they all depend on your SSL Certificate brand, the webserver type, the operating system on your server, and the web hosting panel that you have on your server.

This being said, please check our Installation Articles to get detailed instructions on how to install your SSL Certificate on about 44 different server types, hosting panels, and operating systems.

Also, here are links to documentation on how to install your SSL Certificate on your server, based on the SSL Certificate brand that you have:
– Sectigo
– Thawte/RapidSSL/GeoTrust/DigiCert
– GoGetSSL

We always recommend you get specialized help with your SSL Certificate installation. If you have a web developer or a system engineer, then they would be the right people to help you with your SSL Certificate installation.

Copy Link

Unfortunately, domain names that end with .local are not supported from November 1st, 2015. If you request an SSL Certificate for a domain or sub-domain that has .local as an extension, your SSL Certificate will be rejected by the Certificate Authority.

If you want to secure a domain or sub-domain on your localhost, you can create a self-signed SSL Certificate. There is plenty of documentation online on how to do that.

Copy Link