Uploading a custom SSL certificate
To upload a custom SSL certificate:
- Navigate to HTTPS. (Sign in to your dashboard and, under Set up, navigate to the HTTPS page.)
- Select your domain.
The list automatically fills with the first domain listed in your application. If that’s not the one you want, select the correct one from the list.
If you have multiple sub domains in this application and wish to upload a wild card certificate or a certificate with multiple domains in the Subject Alternate Name(SAN), you will need to upload the certificate for each domain.
Depending on whether you previously uploaded a customer certificate for the application, you'll see either a Specify a customer certificate button or a Change custom certificate button. This will render two input boxes on the page — one for “Public certificate & chain” and the other for “Private key.”
- Paste certificate and key.
You will need to copy the site certificate and any intermediate certificates into the Public certificate & chain box. (For a more in-depth help on determining certificate order than what follows below, contact your Lumen support team).
The order of certificates needs to be domain certificate first, followed by any intermediate certificate(s) in order. Make sure NOT to include the root certificate. The certificates should be PEM encoded and will look like this in a text editor:
-----BEGIN CERTIFICATE-----
/* contents of domain certificate */
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
/* contents of intermediate certificate */
-----END CERTIFICATE-----
If there are more than one intermediate certificate, make sure they are copied in correct order.
-----BEGIN CERTIFICATE-----
/* contents of domain certificate */
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
/* contents of intermediate certificate 1*/
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
/* contents of intermediate certificate 2*/
-----END CERTIFICATE-----
Now copy and paste your private key in to the Private key box. The private key should look like this:
-----BEGIN RSA PRIVATE KEY-----
/* contents of private key */
-----END RSA PRIVATE KEY-----
- Upload. Copy and paste the certificates and private key, then click Save Changes.
The portal checks to make sure the certificate is for the correct domain and the private key is a match for the certificate. Once that is accepted, a deployment is made to the Lumen platform and you should see the new certificate on the site in moments. You will also see the uploaded certificate information at the right hand side of the HTTPS page.
You can also check your newly uploaded certificate using either a command line or third-party online tool. Contact your Lumen representative for more details.
