There are three ways to create a new certificate:
The following procedure describes how to generate self-signed certificates. Self-signed certificates can be used for testing purposes or internal use before deploying the certificate into the production environment. If you need a CSR to obtain a signed certificate from a CA, create a self-signed certificate first.
|Options at the top of the Create a Certificate Form|
|Certificate Name||Enter a name that helps you identify this certificate.|
|Certificate Description||Add a description about this certificate.|
|Auto Renew||Select whether you want CDN Pro to renew the certificate automatically through Let's Encrypt (LE).|
|Share With||This field is available to resellers only. It allows resellers to select the child customers with whom they want to share the certificate.|
|Creation Method||Select Auto-Generate.|
|Template||Populates the form fields with settings from a template. A template is a collection of frequently used settings. Before you use this option, you must save at least one template (see step 4 below). After the fields are populated with the settings from a template, you can change them in the fields below to suit your requirements, and then save the settings in a new template.|
|Public Key Algorithm||Select a public key algorithm for this certificate: RSA2048 or ECC256.|
|Common Name||Enter a common name you want to use for the certificate (can be any text).|
|SAN||Enter one or more Subject Alternative Names (SANs), which will be the hostnames you want this certificate to cover.|
|Country||Enter the name of a country in two letter ISO-3166 country code format.|
|State||Enter the name of a state.|
|City||Enter the name of a city.|
|Street||Enter the name of a street.|
|Company||Enter a company name.|
|Department||Enter a department name.|
|Enter an email address.|
|Comments||Optionally, enter any comments about this initial version.|
Your certificate is saved and appears on the Certificates page. You can now use the certificate with any properties you create, and deploy it to staging and production environments. You can also download the CSR to apply for a signed certificate from a CA, and then upload it to create a new version of this certificate.
If you already have a certificate with the private key and the CA chain certificate, you can upload them so they can be used by properties. Before performing the following procedure, make sure the certificate and associated files are in Privacy Enhanced Mail (PEM) format. The files' content should be plain text and begins with five equal signs (
To upload the files as a new certificate:
Note: Upload only the files you need to change on top of the current latest version.
Your certificate is saved and can now be used with any properties you create.
Using the DNS-01 challenge creation method, you can have CDN Pro automatically create a certificate supporting each of your hostnames after verifying your ownership of them. To verify, modify your DNS server to add a special DNS text record for each hostname. Once the process is completed, you can remove those text records.
To automatically create a certificate supporting each of your hostnames after verifying your ownership of them:
In the SAN field, enter a comma-separated list of hostnames.
Click the Save Certificate button. A Verifying ACME challenge popup specifies the DNS text records to add to verify your ownership. After you verify the ACME challenge, CDN Pro continues to upload the certificate. After the certificate is uploaded, it is saved and can now be used with any properties you create.
Note: It might take a few minutes for the new DNS records to propagate.