Setup StartSSL Certificates: Creating StartSSL Certificates, Part 3 of 4.Last updated March 2nd, 2014 by Steven Jordan
Takeaway: This article provides setup instructions to create free StartSSL certificates. This is the third part in a four-part series on how to use StartSSL certificates. This article assumes the registration process is complete; and the StartSSL personal certificate is installed.
Additional StartSSL articles:
1. Sign-up: Resister with StartSSL.
2. Personal Certificates: Back-up and authenticate to StartSSL with personal certificates.
3. New Cert: Generate the StartSSL certificate.
4. Windows Certificate Management: Import the StartSSL certificate into Windows.
Begin at the StartSSL home page, and click Control Panel and on the following page click Authenticate.
1. Validation Wizard.
Validate your domain name in order to generate SSL certificates for your website. Begin at the StartSSL Control Panel → Validation Wizard → Domain Validation → Continue. Enter your domain name on the following page → Continue.
The big-box CAs (i.e., GoDaddy) require a certificate signing request (CSR) before you can request a SSL certificate. StartSSL is different in this respect, because they provide tools to generate SSL certificates without ever having to touch a Windows server.
Create SSL certificates with the Certificates Wizard located in the StartSSL Control Panel.
1. Select Certificate Purpose.
The first page in the certificate wizard selects the certificate's function. Choose the Web Server SSL/TLS from the pull down menu and click Continue.
It's time to put the certificate to good use. StartSSL provides a handy tool that incorporates both certificate and private key into a single PFX file. We'll later use the PFX file to import the certificate and private key into Windows.
To create the PFX file, click Tool Box and the click on Create the PCKS#12 (PFX) File. Copy and paste the private key, certificate, and password into the appropriate fields. Click Continue.
Next Up: Part four covers the Windows Certificate Store that imports the StartSSL certificate.