There are two ways to create a new certificate:
Auto-generate a self-signed certificate. Use this method if you need a certificate signing request (CSR) to apply for a certificate from a certificate authority (CA). You can then download the CSR of the new self-signed certificate and submit it to the CA. When you receive the CA-signed certificate and chain certificate(s), you can upload them as a new version.
Upload the private key, certificate, and chain certificate(s).
The following procedure describes how to generate self-signed certificates. Self-signed certificates can be used for testing purposes or internal use before deploying the certificate into the production environment. If you need a CSR to obtain a signed certificate from a CA, create a self-signed certificate first.
Fields | Description |
---|---|
Options at the top of the Create a Certificate Form | |
Certificate Name | Enter a name that helps you identify this certificate. |
Certificate Description | Add a description about this certificate. |
Auto Renew | Select whether you want CDN Pro to renew the certificate automatically through Let's Encrypt (LE). |
Share With | This field is available to resellers only. It allows resellers to select the child customers with whom they want to share the certificate. |
Creation Method | Specify whether you want to upload a certificate you already have or generate a certificate using CDN Pro. |
Auto-Generate Options | |
Template | Populates the form fields with settings from a template. A template is a collection of frequently used settings. Before you use this option, you must save at least one template (see step 4 below). After the fields are populated with the settings from a template, you can change them in the fields below to suit your requirements, and then save the settings in a new template. |
Public Key Algorithm | Select a public key algorithm for this certificate: RSA2048 or ECC256. |
Common Name | Enter a common name you want to use for the certificate (can be any text). |
SAN | Enter one or more subject alternative names (SANs), which will be the hostnames you want this certificate to cover. |
Country | Enter the name of a country in two letter ISO-3166 country code format. |
State | Enter the name of a state. |
City | Enter the name of a city. |
Street | Enter the name of a street. |
Company | Enter a company name. |
Department | Enter a department name. |
Enter an email address. | |
Comments | Enter some comments about this initial version. |
Your certificate is saved and appears on the Certificates page. You can now use the certificate with any properties you create, and deploy it to staging and production environments. You can also download the CSR to apply for a signed certificate from a CA, and then upload it to create a new version of this certificate.
If you already have a certificate with the private key and the CA chain certificate, you can upload them so they can be used by properties. Before performing the following procedure, make sure the certificate and associated files are in Privacy Enhanced Mail (PEM) format. The files' content should be plain text and begins with five equals signs (=====
).
To upload the files as a new certificate:
Note: Upload only the files you need to change on top of the current latest version.
Your certificate is saved and can now be used with any properties you create.