So I was install the SSL certificate in prep for a Virtual Christmas Tree – I had the SSL for a long time and two of us cringe when we hear “lets renew our SSL certificate” because it is always a dogs breakfast. We the decided to both write this and and that down “for next time” as we only do this once every 3 or 4 months and each situation and platform is different. I heard one of my customers say “oh- that is included in my package”. I asked “how much do you pay for your package?” “Oh … $370 per month” he said – so someone is installing his SSL too (maybe I am too inexpensive) and likely has pulled his hair out as well a time or two. Alas – here are some notes for next year to help me help my clients next year and do it quicker each time. I hope it helps you as well. <\/p>\n\n\n\n\n\n\n\n
The formatting isn’t great as it is a copy\/paste from some text notes, but the content is ok.<\/p>\n\n\n\n
1. Generate a Private Key<\/p>\n\n\n\n
– Save this on a USB stick or two \u2013 never give it to anyone and don’t save it on your hackable hard drive – save it on a mem stick that can’t be hacked.<\/p>\n\n\n\n
– are you using a secret phrase? Document that too<\/p>\n\n\n\n
– It looks like —– BEGIN PRIVATE KEY ——<\/p>\n\n\n\n
– don’t ever lose this you WILL need it one day<\/p>\n\n\n\n
– some companies call this an RSA key<\/p>\n\n\n\n
2. Let pretend you are using goDaddy <\/strong><\/p>\n\n\n\n – Make SSL Cert<\/p>\n\n\n\n – This looks like —- BEGIN CERTIFICATE —–<\/p>\n\n\n\n – Paste in the Private Key when asked \u2013 this key\u2019s the certificate <\/p>\n\n\n\n – It generates a download zip file that contains 3 files. What are these?<\/p>\n\n\n\n a) #########.crt (called the primary root cert)<\/p>\n\n\n\n b) #########.pem (private encryption mail)<\/p>\n\n\n\n c) gd-bundle-gX-gY.crt (this is called the intermediate certif and used as a proxy<\/p>\n\n\n\n My buddy who installs these a lot says you only need 2 of these.<\/p>\n\n\n\n 3. Renewal Time …. <\/strong><\/p>\n\n\n\n – If a cert is being renewed you DO NOT need the private key<\/p>\n\n\n\n – Eg look here for it if you are unsure when you know you have done this whole thing once before like a renewal or moving to a different server (and still have access to the old server)<\/p>\n\n\n\n