Generate a CSR the Right Way
Your Certificate Signing Request determines what the certificate authority can actually issue — get it right first.
Task-focused guides covering the full lifecycle of certificate management, across every major server platform and format.
Your Certificate Signing Request determines what the certificate authority can actually issue — get it right first.
Where the certificate, private key, and CA bundle actually go — and the AutoSSL alternative.
Six causes, ranked by how often they're actually the problem.
Renewal looks simple until you account for validation, installation, and the reload step people skip.
Four formats, the same underlying data, and the exact OpenSSL command for every conversion between them.
The setup that makes certificate expiry a permanently solved problem instead of a recurring task.
From a bare server block to a fully working, redirecting, hardened HTTPS site.
The Apache equivalent, module by module, from a plain HTTP VirtualHost to a working HTTPS site.
Where the certificate actually belongs in a container architecture — and where it usually shouldn't.
Your website's padlock protects visitors. This is the encryption that protects the connection behind it.
Automating wildcard certificate issuance through Cloudflare's DNS API, step by step.
Automating wildcard certificate issuance through Route 53's API using an IAM policy scoped to exactly what's needed.
When Cloudflare's free, automatic certificate is enough, and when installing your own on the origin server actually matters.
Hardcoding trust into a mobile app protects against a compromised CA — and creates a real risk of accidentally locking out your own users.
What to do, in order, if you know or suspect your private key has been exposed — this is time-sensitive, not a routine reissue.