Custom SSL Certificate

You can continue using your custom certificate by going to the Arvancloud HTTPS Settings.

Activate the HTTPS for your account, then click on the Custom Certificate. Upload the Certificate and Private Key files, and, if necessary, the Bundle of your certificate.

For this, you need your .crt file and private key. In the following document, you can learn how to prepare SSL/TLS Certificates in the PEM format and how to create a Certificate Trust Chain.

Preparing SSL/TLS Certificate in PEM Format

The PEM (Privacy-enhanced Electronic Mail) format is used for storing keys and encrypted certificates. It is the most popular format for open-source systems.

Unlike most binary storing formats, the PEM format uses base64 for encoding. This makes reading the file much more accessible.

Although the extensions in the open-source system are not of high importance, PEM files that include private keys use extensions of .key, and the certificate files use the certificate of .cer, .crt, or .pem.

You can view PEM files using text editors such as notepad or vim.

The content of the Private Key will be like this:

A sample PEM file containing Certificate content will have a structure similar to this:

Converting Other Formats to PEM

The certificate formats can differ based on where you have acquired it from. You can easily change the PFX-PKCS#12 or P7B-PKCS#7 formats to PEM. For this purpose, you can use online tools or follow OpenSSL instructions.

Please note that PFX files include the private key and the certificate; therefore, you can extract them from the file.

Convert DER to PEM

openssl x509 -inform der -in certificate.cer -out certificate.pem

Convert P7B to PEM

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.pem

Convert PFX to PEM

openssl pkcs12 -in certname.pfx -nokeys -out certificate.pem openssl
pkcs12 -in certname.pfx -nocerts -out private.key -nodes

Creating Certificate Trust Chain

Suppose you want your SSL/TSL Certificate to work correctly and display your website’s content through the HTTPS protocol for operating systems, devices, and browsers. In that case, you need to create an SSL Certificate Trust Chain instead of uploading your certificate.

If you have not converted your certificate to PEM format, you can learn how by reading the guide on Creating a .PEM File for SSL/TLS Certification Installation.

Required Files

When you purchase an SSL/TSL Certificate, you will have access to the Private Key, Certificate, and other files, one of which is the Root Certificate, or 1 or 3 files titled Intermediate Certificate.

If you cannot access the Root and Intermediate files, you can download them from the company's website that has provided your certificate.

Creating an SSL Certificate Trust Chain

To create the Trust Chain file, you can easily use a text editor like vim or notepad. Then we create the website Certificate, Root Certificate and Intermediate Certificate files in one file in the following order:

—---BEGIN CERTIFICATE---—
(Your Primary SSL certificate: yourwebsite.crt)
—---END CERTIFICATE---—
—---BEGIN CERTIFICATE---—
(Your Intermediate certificate: INTERMEDIATE.crt)
—---END CERTIFICATE---—
—---BEGIN CERTIFICATE---—
(Your Root certificate: Root.crt)
—---END CERTIFICATE-----

You can consult the guide below to receive your Chain Certificate using your browser.

How to Create a Chained Certificate Using a Browser

Custom SSL Certificate

Preparing SSL/TLS Certificate in PEM Format​

Converting Other Formats to PEM​

Creating Certificate Trust Chain​

Required Files​

Creating an SSL Certificate Trust Chain​

Preparing SSL/TLS Certificate in PEM Format

Converting Other Formats to PEM

Creating Certificate Trust Chain

Required Files

Creating an SSL Certificate Trust Chain