To install a secure certificate for the fictitious site domain.com,
here is what you should do:
1) Begin in the Control Panel of domain.com.
2) Click on the Secure Server button.
3) Then click on Generate Request.
4) Fill-out the form with the correct information.
5) Click on Generate Request at the bottom of the screen.This
will generate a Certificate Signing Request [CSR].
The CSR looks like this:
-----BEGIN CERTIFICATE REQUEST-----
MIIBRzCB8gIBADCBjDELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBVRleGFzMRMwEQYD
VQQHEwpTdWdhciBMYW5kMSYwJAYDVQQKEx1JbnRlcmdyb3VwIFRlY2hub2xvZ3ksIEwuT
C5DLjEeMBwGA1UECxMVV2ViIHByb2R1Y3RzIGRpdmlzaW9uMRAwDgYDVQQDEwcwODA
ubmV0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN4sJTLUlOaBNbCX2UwixJB16UE+X
PsooNQgZV3QwL+eBDuf5fQUClqWWZrpRsVczzj2l/ptiQKVhQmjt4yK4rcCAwEAAaAAMA0G
CSqGSIb3DQEBBAUAA0EAnAGcRQhkQZJS01aqWLfSPKNmLglg0qXsWLN7SyPTXcpBLKR
dCHXjECNPfRBfPpVhd6S4N1e7N8KVuebbW12mRQ==
-----END CERTIFICATE REQUEST-----
6) Make and save a back-up copy of the CSR and
key (and key decryption password)
7) Then send the CSR to Verisign or Thawte.After asking for a
lot of business verification
information, Verisign, or Thawte, will send back a certificate.
The certificate looks like this:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE----
-9) Using Control Panel -- install the certificate
and previously saved key.
The private key looks like this:
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----