Free and Unlimited Web Hosting

How to install an SSL certificate

How to install an SSL certificate

In order to get a green lock in the address bar in your website, you need to install an SSL certificate on your account. This article describes how you can do that.

Getting a new SSL certificate

If you do not have an SSL certificate for your domain name yet, you need to order one first.

First, you need to get a new SSL certificate. You can get an SSL certificate from one of various different certificate vendors.

To allow the certificate vendor to generate the certificate, you need to give them the Certificate Signing Request, or CSR. To find the CSR for your domain, go to your control panel -> SSL/TLS -> click the Configure button. Then, click "Generate Key / CSR". Finally, copy all text from the CSR field and submit it to your certificate vendor.

When issuing an SSL certificate, you probably need to verify your e-mail address. Before trying to issue the certificate, be sure to select an e-mail address you can receive e-mail on!

After the certificate has been issued, you will receive the certificate from the certificate issuer. You can then install that certificate by copying the certificate text (including the BEGIN CERTIFICATE and END CERTIFICATE lines) to the Certificate box in the SSL/TLS section and click Upload Certificate.

The certificate is now installed on your account.

Installing an existing certificate

If you already have an SSL certificate which has been issued before (for another hosting provider), you can install it on your account here.

To do so, you will need the certificate text and the private key text of your certificate. If you do not have these files anymore, you will need to reissue the certificate. See "Getting a new SSL certificate" for instructions on getting a new SSL certificate.

Next, go to your control panel, click SSL/TLS and click Configure next to the domain you want to install the certificate on.

Then, copy the private key text (including the BEGIN PRIVATE KEY and END PRIVATE KEY lines) in the Private Key field and click Upload Key. Also, copy the certificate text (including the BEGIN CERTIFICATE and END CERTIFICATE lines) to the Certificate box and click Upload Certificate.

The certificate is now installed on your account.

After installing your certificate...

Once the certificate has been installed, you can verify it has been installed correctly using an SSL checker. Using an SSL checker is the best way to find out whether the certificate installation was successful.

By now, you can also try to verify it's installed correctly by visiting https:// . If you see a green lock in your browser's address bar, that means the certificate has been installed correctly.

If you do not see a green lock, here are some things to check: - If you see a red warning page, your browser may not have checked the new certificate. Some browsers (notably Google Chrome) remember the certificates of websites for some time, so it may take a few hours for your browser to see the new certificate. - If you are redirected from the https:// page to http:// , your website is forcing people to the non-https version of your site. Most of the time, the script has a setting for the "website URL" or something like that. If you change the website URL to https://, you should be able to see the website over https. - If your website is using the https:// URL but the address bar is still white, it means that some of the stylesheets, scripts or images on the page are still using http:// URLs. You need to find those URLs and make sure they all use https as well.

Note: using CA certificate chains

Most certificate vendors will ask you to install the CA chain certificates as well. These are not supported on InfinityFree and cannot be installed.

However, most browsers will recognize certificates from popular certificate issuers without a certificate chain as well, so you do not need the CA chain. Only certain outdated browsers may not properly recognize the certificates.

If you insist on using CA certificate chains, you could consider to upgrade your account, where you can install your own certificates including their CA chains.

Still have questions? Check our forum!