Fully validated, Enterprise SSL Certificates

• Products
• Resellers
• Comparisons
• Corporate
• Support
• Contacts

Latest News:

• SSL Support Home
• Browser Compatibility
• Free Security Guides
• EPKI Support
• FAQs & Solutions
• SSL Application Stages:
• 1. Creating a CSR
• 2. Buy a Certificate now
• 3. Doc Requirements
• 4. Installing a Certificate

Installing your Certificate on Apache Mod_SSL / OpenSSL

Step one: Copy your certificate to file

You will receive an email from Comodo with the certificate in the email (yourdomainname.crt). When viewed in a text editor, your certificate will look something like:

-----BEGIN CERTIFICATE-----
MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF
UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAUAMF8xCzAJBgNVBAYTAlVTMSAw
(.......)
E+cFEpf0WForA+eRP6XraWw8rTN8102zGrcJgg4P6XVS4l39+l5aCEGGbauLP5W6
K99c42ku3QrlX2+KeDi+xBG2cEIsdSiXeQS/16S36ITclu4AADEAAAAAAAAA
-----END CERTIFICATE-----

Copy your certificate into the directory that you will be using to house your certificates. In this example we will use /etc/ssl/crt/. Both the public and private key files will already be in this directory. The private key used in the example will be labeled private.key and the public key will be yourdomainname.crt. We recommend that you make the directory that contains the private key file only readable by root.

Step two: Install the Intermediate Certificate

Installing the Intermediate CA certificates will allow browsers to trust your certificate. The Intermediate CA certificates are located within the ca-bundle file that was attached to your email in the zip file (this should be named your SERVERNAME.ca-bundle). In the relevant Virtual Host section for your site, you will need to complete the following so this file will receive correct referencing:

Copy the. SERVERNAME.ca-bundle file to the same directory as certificate and key files and name it ca.txt

Add the following line to the SSL section of the httpd.conf (assuming /etc/httpd/conf/ is the directory to where you have copied the intermediate CA file) If the line already exists amend it to read the following:

SSLCACertificateFile /etc/httpd/conf/SERVERNAME.ca-bundle

If you are using a different location and certificate file names, change the path and filename to reflect the path and file name that you are using. The SSL section of the updated config file should now read similar to this example (depending on the file name and directories used):

SSLCertificateFile /etc/ssl/crt/yourdomainname.crt
SSLCertificateKeyFile /etc/ssl/crt/private.key
SSLCACertificateFile /etc/ssl/crt/SERVERNAME.ca-bundle

Save your config file and restart Apache.