User certificates

You can upload to the certificate manager a user certificate that you issued with a third-party certificate authority. To do this, you need:

• the primary domain certificate;
• a private key;
• optional: one or more intermediate certificates. Intermediate certificates bind the final TLS certificate to the root certificate authority; they are used by the browser to verify the authenticity of the issued TLS certificate;
• optional: a root certificate—the part of the key with which certificate authorities sign TLS certificates. It may be required when using self-signed certificates.

Add a user certificate

Control panel

1. A user certificate is only valid in the project to which it was added. Make sure you are in the correct project. To do this, open the project menu (the title of the current project) and select the project.

2. In the Control panel, from the top menu, click Products and select Certificate Manager.

3. In the Certificates section, click Add certificate.

4. Select User certificate.

5. Enter a certificate name.

6. Paste the primary domain certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

7. Paste the private key. It must start with -----BEGIN PRIVATE KEY----- and end with -----END PRIVATE KEY-----.

8. Optional: to add an intermediate certificate:

   8.1. Select the Add intermediate certificate checkbox.

   8.2. In the Intermediate certificate field, paste the certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

   If you need to add multiple intermediate certificates, ensure that all the certificates (the primary domain certificate, intermediate certificates, and root certificate) form a complete chain. The Issuer value of the primary certificate must match the Subject value of the first intermediate certificate, the Issuer value of the first intermediate certificate must match the Subject value of the second intermediate, and so on.

   Intermediate certificates can be added to the Intermediate certificate field in any order; it is important to use the full chain.

9. Optional: to add a root certificate:

   9.1. Select the Add root certificate checkbox.

   9.2. In the Root certificate field, paste the certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

10. Click Add.

Terraform

Use the Add certificate guide in the Terraform documentation.

Update a user certificate

1. In the Control panel, from the top menu, click Products and select Certificate Manager.

2. In the menu of the certificate, select Update.

3. Paste the primary domain certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

4. Paste the private key. It must start with -----BEGIN PRIVATE KEY----- and end with -----END PRIVATE KEY-----.

5. Optional: to add an intermediate certificate, select the Add intermediate certificate checkbox and, in the Intermediate certificate field, paste the certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

   If you need to add multiple intermediate certificates, ensure that all the certificates (the primary domain certificate, intermediate certificates, and root certificate) form a complete chain. The Issuer value of the primary certificate must match the Subject value of the first intermediate certificate, the Issuer value of the first intermediate certificate must match the Subject value of the second intermediate, and so on.

   Intermediate certificates can be added to the Intermediate certificate field in any order; it is important to use the full chain.

6. Optional: to add a root certificate, select the Add root certificate checkbox and, in the Root certificate field, paste the certificate. It must start with -----BEGIN CERTIFICATE----- and end with -----END CERTIFICATE-----.

7. Click Update.