How to Get Started with SSL Certificates
An SSL certificate helps secure the connection between your website and its visitors by encrypting data transmitted between the browser and the server. When SSL is installed correctly, your website can use HTTPS instead of HTTP.
This guide explains the basic steps for getting started with an SSL certificate for your website or hosting service.
1. Understand What an SSL Certificate Does
SSL certificates help protect information transmitted between visitors and your website.
After SSL is installed and configured correctly, your website can normally be accessed using:
https://yourdomain.com
Modern browsers may also display a secure connection indicator when the certificate is valid.
2. Make Sure Your Domain Is Active
Before installing an SSL certificate, make sure your domain is active and correctly configured.
Your domain should normally:
- Be registered and active
- Point to the correct hosting server
- Have valid DNS records
- Be accessible from the internet
Incorrect DNS settings can prevent certificate validation or installation.
3. Choose the Appropriate SSL Certificate
Different SSL certificates may be suitable for different requirements.
Depending on the product, SSL certificates may support:
- A single domain
- A domain and its www version
- Multiple domains
- Multiple subdomains
- Wildcard subdomains
Review the certificate coverage carefully before ordering.
4. Order Your SSL Certificate
If you are purchasing an SSL certificate from ApnCloud, select the appropriate SSL product and complete your order from the ApnCloud website or Client Area.
Review the product details, certificate coverage, billing term, and domain requirements before completing your purchase.
5. Complete Domain Validation
Before an SSL certificate can be issued, the certificate provider may need to verify that you control the domain.
Depending on the certificate and validation method, domain validation may involve:
- DNS verification
- Email verification
- HTTP or file-based verification
Follow the exact validation instructions provided for your SSL certificate.
6. Generate a CSR if Required
Some SSL certificate installations require a Certificate Signing Request, commonly called a CSR.
A CSR contains information required for certificate issuance and is generated from the server or hosting environment where the certificate will be installed.
Keep the associated private key secure. Do not share the private key publicly or include it in a support ticket.
7. Wait for Certificate Issuance
After validation is completed successfully, the certificate authority can issue the SSL certificate.
The time required may vary depending on the certificate type, validation method, and provider.
Check your registered email address and SSL management area for certificate status and issuance information.
8. Install the SSL Certificate
After issuance, install the SSL certificate on the server or hosting account where your website is hosted.
The installation method depends on your hosting environment and control panel.
You may need:
- The SSL certificate
- The private key
- The certificate chain or intermediate certificate
- The correct domain configuration
9. Enable HTTPS
After the certificate is installed, test your website using:
https://yourdomain.com
If your website still loads through HTTP, you may need to configure an HTTPS redirect from your website, control panel, or web server.
10. Test Your Website After Installation
After enabling SSL, verify that:
- The website opens using HTTPS
- The certificate matches the correct domain
- The certificate is valid and not expired
- Important pages load correctly
- Images, scripts, and styles load securely
11. Watch for Mixed Content
Mixed content occurs when an HTTPS page still loads some resources through HTTP.
This may involve:
- Images
- CSS files
- JavaScript files
- External resources
Update insecure resource URLs to HTTPS where appropriate.
12. Keep Track of the Expiration Date
SSL certificates may require renewal before their expiration date.
Keep your contact and billing information updated so you do not miss important renewal or validation notifications.
A certificate that expires may cause browsers to display security warnings to website visitors.
Common SSL Problems
If SSL is not working correctly, check the following:
- The domain points to the correct server
- Domain validation has been completed
- The SSL certificate has been issued
- The certificate was installed on the correct domain
- The private key matches the certificate
- The certificate chain is configured correctly
- The certificate has not expired
Important SSL Security Tips
- Never share your SSL private key
- Use certificates only for the domains they were issued for
- Renew certificates before expiration
- Keep your website and server software updated
- Use HTTPS consistently across your website
Need Help?
If you experience an issue purchasing, activating, validating, or installing an SSL certificate, please open a Support Ticket from your ApnCloud Client Area.
Include your domain name, SSL product, and a clear description of the problem. Never include your private key or account password in a support ticket.