When to Use Custom SSL
You might need a custom SSL certificate instead of free Let's Encrypt for:
- Extended Validation (EV): Shows company name in browser
- Wildcard SSL: Secure unlimited subdomains
- Organization Validation (OV): Verified business identity
- Longer Validity: Up to 1-2 years
- Warranty: Financial protection if breached
What You'll Need
From your SSL provider, you'll receive:
- Certificate (CRT): Your domain's SSL certificate
- Private Key: Generated when you created the CSR
- CA Bundle: Intermediate/chain certificates
Step 1: Generate CSR (If Not Done)
If you haven't purchased your certificate yet, generate a CSR first:
Go to SSL Section
In EGPNL, navigate to SSL → Generate CSR.
Fill in Details
Enter your domain name, organization details, and location.
Generate and Save
Click Generate. Save both the CSR and Private Key securely.
Step 2: Purchase SSL Certificate
Submit your CSR to an SSL provider like:
- DigiCert
- Sectigo (formerly Comodo)
- GlobalSign
- GeoTrust
Complete their verification process and download your certificate files.
Step 3: Install Certificate
Access SSL Settings
In EGPNL, go to SSL → Install Custom Certificate.
Select Domain
Choose the domain you're installing the certificate for.
Enter Certificate
Paste your certificate content including -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----.
Enter Private Key
Paste your private key content including the BEGIN and END markers.
Enter CA Bundle (Optional)
Paste the intermediate/chain certificates if provided.
Install
Click Install Certificate and wait for confirmation.
Verify Installation
- Visit your website using
https:// - Click the padlock icon in the browser
- View certificate details to confirm it's your new certificate
- Check validity dates and issuer
SSL Checker Tools
Use these tools to verify your installation:
Common Issues
Certificate Chain Incomplete
Make sure to include the CA bundle/intermediate certificates.
Private Key Mismatch
The private key must match the one used to generate the CSR.
Certificate Expired
Ensure you're using a current, valid certificate.
Was this article helpful?