Support Desk

Download and copy your certificate files to your server

Download your SSL certificate and support files by clicking on the download link in your fulfillment email or from your GeoCerts SSL Manager account. Unzip the files and copy them into the directory where you will keep your certificates. Some files in the zip may or may not be used depending on your server type.

Rename all the files in the zip from a .txt extension to .crt extension (not all files will be used).

1. Install the CA Bundle

Save the CA Bundle (CA_Bundle.crt) to your server. The CA Bundle contains all the necessary intermediates and root bundled into a single file. This file can be placed in the same directory as your SSL server certificate such as /usr/local/ssl/crt (yours may be different).

2. Install the SSL Server Certificate

Save the server certificate (your_domain_com.crt) to the Apache server directory in which you plan to store your certificates, such as /usr/local/ssl/crt (yours may be different).

3. Configure the Server

Open the Apache httpd.conf file in a text editor.

Use the following command to find out the location or your Apache config file. 
apache2ctl -V | grep SERVER_CONFIG_FILE
or just 
apachectl -V | grep SERVER_CONFIG_FILE

Locate the SSL VirtualHost container associated with your certificate. Verify that you have the following three directives within this virtual host. Please add them if they are not present.

    <VirtualHost 172.18.116.42:443>
      DocumentRoot /etc/httpd/htdocs
      ServerName secure.somewhere.com
      SSLEngine on
      SSLCertificateFile /usr/local/ssl/crt/your_domain_com.crt
      SSLCertificateKeyFile /usr/local/ssl/private/private.key
      SSLCACertificateFile /usr/local/ssl/crt/GeoTrust_CA_Bundle.crt
    </VirtualHost>

The first directive tells Apache how to find the server certificate file, the second one where the private key is located, and the third line the location of the GeoTrust CA Bundle.

Note: Some versions of Apache will not accept the SSLCACertificateFile directive. Try using SSLCertificateChainFile instead.

If you are using a different location and certificate file names than the example above (which most likely you are) you will need to change the path and filename to reflect your server.

Note: Some instances of Apache contain both a httpd.conf and ssl.conf file. Please enter or amend the httpd.conf or the ssl.conf with the above directives. Do not enter both as there will be a conflict and Apache may not start.

Save the changes and exit the editor.

After making changes to your config file it is good practice to check the file for syntax errors using apachectl configtest. The command will return Syntax Ok if there are no errors.

Restart your apache web server:
apachectl stop
apachectl start

Verify Installation

To verify if your certificate is installed correctly, use our Certificate Installation Checker.

Jan 15, 2018 Scott Rogers
Contact Us!

Contacts

GeoCerts, Inc.
2221 Peachtree Rd NE
Suite D-236
Atlanta, GA 30309
Toll Free: (800) 892-7095
International: +1 (404) 424-9753
Email: team@geocerts.com

Live Chat

Business Hours

  • Monday-Friday: 9am to 6pm EDT (UTC/GMT -4)
  • Saturday/Sunday: Closed