Installing an SSL Certificate can feel overwhelming, especially if this is your first time. The good news is that SSL Certificate installation is simpler than it appears.
Once you understand the three components involved, the process becomes much more manageable.
There Are Only Three Parts
Every SSL Certificate installation requires exactly three components. That is all there is to it. If you have the three corresponding parts in the right place, your SSL Certificate will work perfectly, there is absolutely no dispute regarding this fact.
However, if the following three parts are not installed correctly or not corresponding - you'll have 100% failure, there's also no disputing that fact :
- Your SSL Certificate
- The Intermediate Certificate(s)
- Your Private Key
Think of it like a lock and key system. Your SSL Certificate is the lock that visitors see. The Intermediate Certificate(s) prove that your lock is genuine. Your Private Key is what makes it all work together.
Without all three, the system cannot function.
Where To Get Each Part
Each of the three components comes from a different place. The following sections explain where to find each one.
Your SSL Certificate
Your SSL Certificate is provided by Trustico® after your order has been validated. You can download it from the tracking system.
The SSL Certificate is also sent to you via e-mail when it is issued. Explore Trustico® Tracking System 🔗
The Intermediate Certificate(s)
Intermediate Certificates are provided by Trustico® and are sent to you via e-mail along with your SSL Certificate when it is issued. They are also available for download from the tracking system and the Intermediate Certificates page.
These files tell web browsers that your SSL Certificate is trusted. Without them, visitors may see security warnings even though your SSL Certificate is correctly installed. Discover Intermediate Certificate Information 🔗
Your Private Key
Your Private Key was created at the same time as your Certificate Signing Request (CSR).
If you generated your Certificate Signing Request (CSR) using your server or hosting control panel, your Private Key is already stored there.
If you used the Trustico® AutoCSR service, you already have your Private Key and an unlock code is available on your order status page in the ordering system.
If you used the Trustico® Certificate Signing Request (CSR) Generator tool, you would have downloaded your Private Key at the time of generation. Learn About Certificate Signing Request (CSR) Information 🔗
What If I Cannot Find My Private Key
If you cannot locate your Private Key, do not panic. You can reissue your SSL Certificate using a new Certificate Signing Request (CSR) at no additional cost.
The reissue process generates a new SSL Certificate that works with a new Private Key. Reissuing is free and can be done through the tracking system. Discover How To Reissue Your SSL Certificate 🔗
Download Your SSL Certificate Files
You can download your SSL Certificate and Intermediate Certificates from the tracking system at any time.
If you need to reissue your SSL Certificate with a new Private Key, you can also do this through the tracking system.
Checking Your Installation
Once you have installed all three parts, you can verify everything is working correctly using the Trustico® Chain Analyzer tool.
Simply enter your domain name and the tool will check that your SSL Certificate, Intermediate Certificate(s) and configuration are all correct.
If something is missing or misconfigured, the tool will tell you exactly what needs to be fixed. Explore Trustico® Chain Analyzer 🔗
You Are Not Alone
Thousands of customers successfully install SSL Certificates every day. The process may seem technical, but it follows the same three steps every time.
Collect your three parts, place them on your server according to your hosting provider or server documentation, and verify the installation using the Chain Analyzer tool.
Remember that the server software or hosting platform you are using was created and is managed by others. Your hosting provider, server software vendor or system administrator are the people responsible for assisting you with installation on their platform. They understand their own systems and can provide specific guidance for their environment.
Trustico® provides a range of free tools to help you through the process. The Certificate and Private Key Matcher can verify that your SSL Certificate and Private Key are a valid pair before you begin installation.
The PFX Converter can combine all three parts into a single file if your server requires that format. Explore Trustico® Certificate and Private Key Matcher 🔗
For detailed installation instructions specific to your server or hosting environment, visit the SSL Certificate installation page. Discover SSL Certificate Installation Information 🔗
If you would prefer Trustico® to handle the installation on your behalf, the Premium Installation service is available. View Our Premium Installation Service 🔗
Why SSL Certificate Choice Matters
SSL Certificates are essential for any website. They protect your visitors, build trust and improve your search engine rankings. Google has confirmed that SSL Certificates are a ranking factor, meaning websites secured with SSL Certificates have a clear advantage in search results. Discover SSL Certificates and Search Engine Rankings 🔗
By purchasing your SSL Certificate from Trustico® you have made the right choice. You are using a recognised production SSL Certificate designed for securing websites and achieving the highest search engine optimisation benefits.
Some hosting providers take away your ability to install a recognised production SSL Certificate entirely. Customers in these situations become victims of sub-par choices, forced into using whatever the provider decides to offer, often at inflated prices or with limited features.
Installing an SSL Certificate should be a straightforward everyday business function. If your current hosting environment makes SSL Certificate installation unnecessarily difficult, remember this when making future hosting decisions. Avoid platforms that take away the option to install a recognised production SSL Certificate.