Activating and configuring an SSL certificate for your domain involves generating a Certificate Signing Request (CSR), submitting it for validation, and then installing the issued certificate on your server. Most hosting control panels provide built-in tools to handle SSL certificates, making the process straightforward even for beginners. Once configured, your website will use HTTPS to encrypt data between your visitors and your server.
SSL certificates are essential for website security, search engine rankings, and building trust with your visitors. This guide walks you through the complete process of activating and configuring SSL certificates for your domain.
Generating a Certificate Signing Request (CSR)
The first step in obtaining an SSL certificate is generating a CSR, which contains your domain and organization information. Your hosting control panel typically includes a tool for this:
- Log in to your hosting control panel
- Navigate to the SSL/TLS or Security section
- Find the option to generate a new CSR
- Enter your domain name, organization details, and contact information
- Select a key size (2048-bit is standard, 4096-bit offers more security)
- Generate and save both the CSR and private key securely
Keep your private key confidential and stored safely. You will need it during the installation process, and it should never be shared with anyone.
Submitting Your SSL Certificate for Validation
After generating your CSR, you need to submit it for validation. The validation method depends on your certificate type:
Domain Validation (DV): This is the quickest method. You will receive an email at an administrative address for your domain, or you may need to add a specific DNS record or upload a file to your website to prove domain ownership. Follow the instructions provided and complete the verification within the specified timeframe.
Organization Validation (OV) and Extended Validation (EV): These require additional documentation to verify your business identity. You may need to provide business registration documents, phone verification, and other legal paperwork. The validation process can take several days.
Installing Your SSL Certificate
Once your certificate is issued, you will receive the certificate files via email or download. You typically get a certificate file and one or more intermediate certificates (CA bundle). Here is how to install them:
- Access your hosting control panel SSL/TLS management section
- Look for the option to install or manage SSL certificates
- Paste or upload your certificate file in the designated field
- Add the intermediate certificate (CA bundle) in the appropriate section
- Ensure the private key generated earlier is associated with this certificate
- Select the domain where you want to install the certificate
- Save and activate the certificate
Most modern control panels at OBHost will automatically detect and pair the correct private key with your certificate if they were generated in the same location.
Configuring Your Website to Use HTTPS
After installation, configure your website to use HTTPS exclusively:
- Update your website URL in your content management system settings to use https://
- Set up 301 redirects from HTTP to HTTPS to ensure all traffic uses the secure connection
- Update internal links in your content to use HTTPS
- Check for mixed content warnings (loading HTTP resources on HTTPS pages)
- Update any hardcoded links in your database or configuration files
For WordPress sites, you can use plugins to help with the HTTPS migration, or manually update the site URL in the WordPress settings and database.
Verifying Your SSL Certificate Installation
After configuration, test your SSL installation to ensure everything works correctly:
- Visit your website using https:// and check for the padlock icon in the browser
- Use online SSL checker tools to verify the certificate chain is complete
- Check the certificate details to confirm the correct domain and expiration date
- Test all website functionality to ensure no broken features
- Verify that HTTP requests redirect properly to HTTPS
Address any warnings or errors immediately to ensure full security and proper functionality.
Automating SSL Certificate Renewal
SSL certificates expire, typically after one year. Set up automatic renewal to avoid security warnings and downtime:
Many hosting control panels offer automatic renewal features that handle the entire process without intervention. Enable this option if available. You should also set up expiration reminders 30-60 days before the certificate expires as a backup notification system.
Keep your contact email addresses up to date so you receive renewal notifications and validation emails on time.
What is the difference between domain validation and extended validation SSL?
Domain Validation (DV) SSL certificates only verify that you control the domain and can be issued within minutes. Extended Validation (EV) SSL certificates require thorough verification of your business identity, including legal documentation and phone verification, which can take several days. EV certificates display your company name in the browser address bar, providing the highest level of trust for visitors. For most websites, DV certificates provide sufficient security.
Can I use the same SSL certificate on multiple domains?
A standard SSL certificate covers only a single domain. To secure multiple domains, you need either a multi-domain SSL certificate (also called SAN certificate) that can cover up to 250 different domains, or a wildcard SSL certificate that covers one domain and all its subdomains. Choose the certificate type based on your specific needs before generating your CSR.
Why does my website still show as not secure after installing SSL?
If your website shows as not secure after installing a valid SSL certificate, you likely have mixed content issues. This occurs when your HTTPS website loads some resources (images, scripts, stylesheets) over HTTP. Check your page source code and update all internal links to use HTTPS. Also verify that your website is properly redirecting from HTTP to HTTPS, and that you have updated your site URL in your content management system settings.
How do I force all traffic to use HTTPS?
The most common method is adding a 301 redirect rule in your .htaccess file (for Apache servers) or server configuration. The redirect automatically sends all HTTP requests to the HTTPS version of your site. Most hosting control panels also include a simple toggle or checkbox to enable HTTPS enforcement without manual file editing. After enabling the redirect, test by visiting the HTTP version of your site to confirm it redirects to HTTPS.
Setting up SSL certificates protects your website and builds visitor trust. If you need assistance with SSL activation or configuration, OBHost support team is available 24/7 at https://www.obhost.net/contact or via email at support@obhost.org.
