How to install SSL certificates - FAQ

Quick Answer

Choose or manage the certificate based on the hostnames you need to protect, the validation level, the server platform and whether you control DNS. Keep the private key secure, complete validation, install the full certificate chain and verify the live HTTPS connection before relying on the certificate.

Before You Begin

Identify every hostname the certificate must cover.
Confirm that you control DNS or the required validation channel.
Generate and securely retain the private key when a CSR is required.

NiceNIC Instructions

Installing SSL Certificate Notes You can additionally check the SSL installation instructions provided by Sectigo Certification Authority here. If you host your domain name with NiceNic, simply provide us with your certificate and we'll be happy to install it for you. Please note that on all NiceNic Shared Hosting servers, a special NiceNic SSL plugin installs a 1-year free PositiveSSL certificate automatically on the newly added subdomain or add-on. It works the same way for the main domain in the newly purchased hosting account.

The plugin can also be used for manual installation (in a few clicks) of PositiveSSL and EssentialSSL certificates. You can find more details on the free 1 year SSL offer in this article, and here's your reference guide on the NiceNic SSL plugin. A dedicated IP address is required to install an SSL certificate. However, you may install your SSL certificate on a shared IP address using the Server Name Indication (SNI) protocol extension available in your cPanel. You can learn more about the differences between a dedicated IP and SNI technology in this article.

Keep in mind that the SNI technology is available on all NiceNic hosting servers. When contacting our support team with an SSL installation request, please specify whether you wish to order a dedicated IP address or have your SSL installed on a server's shared IP. Installing an SSL certificate on Nginx Installing an SSL certificate on Apache Installing an SSL Certificate on IIS 7

How to Verify

Open the HTTPS site from a clean browser session and inspect the certificate subject, SAN hostnames, issuer, validity dates and chain. Test every hostname covered by the certificate and confirm that HTTP redirects behave as intended.

Troubleshooting

DNS validation records are missing, incorrect or added at the wrong DNS provider.
The certificate does not include the hostname being opened.
The private key does not match the certificate or CSR.
The server is missing an intermediate certificate or is still presenting the old certificate.

Frequently Asked Questions

Can I reuse the same certificate after moving servers?

Often the certificate can be reinstalled if you still have the matching private key and the certificate remains valid. Reissue it when the key, CSR or certificate details must change.

Why does the browser still show the old certificate?

The server or load balancer may still present the old certificate, another virtual host may be selected, or an intermediate cache may not have reloaded the configuration.

When should I submit a ticket?

Submit a ticket when validation remains pending after the published records are visible, or when the NiceNIC order does not provide the expected certificate files.

Related NiceNIC Guides

If the issue continues after you complete the checks above, submit a NiceNIC support ticket with the affected domain or product, the exact error message, the time of the issue and the troubleshooting already completed.