Obtain the issued certificate and intermediate bundle from your certificate authority. Locate the matching private key securely, or generate a new key and CSR before ordering a replacement. Never send a private key in an ordinary support message.

1. Open the domain’s shield action under Hosting Features > Domains > Manage.
2. Use the private-key and CSR controls for the supported issuance workflow. If the request was generated elsewhere, make sure the installed key matches that issued certificate.
3. Open Setup SSL Certificate and install the certificate text in its expected format. Do not substitute the CSR or an order confirmation.
4. Use Setup SSL Chain Certificate for the CA’s required intermediate certificate bundle. Preserve the previous working material until validation succeeds.
5. Test HTTPS for every required hostname from an independent browser or certificate-checking tool, then record renewal ownership and the expiry date.

The server should present the intended certificate and complete chain with the correct names. A successful installation message does not prove that DNS sends visitors to this server.

For a key mismatch, locate the original key or reissue through the CA with a new CSR. For a missing name, reissue with the correct coverage. Do not replace a valid public certificate with a self-signed one to hide an installation problem.

No. Use the certificate-management workflow and retain a protected recovery copy. A public document root is not an appropriate place for certificate keys or certificate purchase records.

• Requesting a Let’s Encrypt certificate in SiteWorx
• Redirecting a SiteWorx website to HTTPS after certificate setup
• Adding and editing DNS records in SiteWorx
• Adding a pointer domain in SiteWorx

• InterWorx: Setup SSL Certificate