Install an SSL Certificate

Use the information on this page to install your SSL Certificate. Trustico® SSL Certificates work with any server, device, hosting account, or application that supports the use of an SSL Certificate.

What You Need to Install Your SSL Certificate

A complete SSL Certificate installation requires three components to function correctly :

  • SSL Certificate
  • Intermediate Certificate(s)
  • Private Key

All three components must be present and correctly configured for your SSL Certificate to work properly.

Your SSL Certificate file is provided by Trustico® after your order has been validated and issued. It is delivered by e-mail or made available for download in the tracking system. Explore the Tracking System 🔗

The Intermediate Certificate(s) establish the chain of trust between your SSL Certificate and the trusted Root Certificate held in web browsers and devices. Without the correct Intermediate Certificate(s), visitors may see security warnings or connection errors. Discover Our Intermediate Certificates 🔗

Your Private Key was generated when you created your Certificate Signing Request (CSR) and must be kept secure on your server. The Private Key and the SSL Certificate form a cryptographic pair and must match exactly. Learn About Certificate Signing Request Generation 🔗

SSL Certificate Installation Instructions

The following links open SSL Certificate installation instructions for common servers and control panels. The documentation is provided by our partners and opens in a new window.

Apache, Mod SSL 🔗 Microsoft Internet Information Services (IIS) 7.x 🔗
NGINX 🔗 Microsoft Internet Information Services (IIS) 8.x 🔗
All Other Web Servers 🔗 Microsoft Internet Information Services (IIS) 5.x and 6.x 🔗
Mozilla SSL Configuration Generator 🔗 Sectigo® SSL Certificate Installation Guides 🔗
Qualys SSL Server Test 🔗

SSL Certificates can be used in many applications. If your server is not listed above, refer to your server documentation or contact your hosting provider for specific installation instructions.

Intermediate Certificates for Trustico® branded SSL Certificates issued after 24 May 2025 are available for download from the Intermediate Certificates page.

Trustico® SSL Certificate Tools

Trustico® provides a set of free online tools to help with SSL Certificate installation, verification, and troubleshooting.

The Chain Analyzer validates your complete Certificate chain and checks your website installation for any missing Intermediate Certificates or configuration problems that may cause browser warnings. Use it after installation to confirm your SSL Certificate is set up correctly. Explore the Trustico® Chain Analyzer 🔗

The PFX Converter combines your SSL Certificate, Intermediate Certificate(s), and Private Key into a single PKCS#12 (PFX) file, which is required for installation on Microsoft Windows servers and some other platforms. Explore the Trustico® PFX Converter 🔗

The Certificate and Private Key Matcher confirms that your SSL Certificate and Private Key form a valid cryptographic pair before installation, which helps prevent errors caused by mismatched files. Explore the Trustico® Certificate and Private Key Matcher 🔗

The Certificate Signing Request (CSR) Generator creates a new Certificate Signing Request (CSR) and Private Key pair for use when ordering or reissuing an SSL Certificate. Explore the Trustico® Certificate Signing Request (CSR) Generator 🔗

About Installation Support

SSL Certificate installation is carried out on your server or hosting environment and is the responsibility of the server administrator or hosting provider. Trustico® provides detailed online documentation, tools, and resources to assist, though dedicated installation support is not offered as standard, given the wide variety of web servers, control panels, and applications in use.

If you would like Trustico® to install your SSL Certificate for you, the Premium Installation service is available as an additional purchase at the time of ordering. View Our Premium Installation Service 🔗

More Resources

Trustico® provides further resources to help with SSL Certificate installation and configuration.

This document shows the current Sectigo® issuing Certificate Authority (CA) hierarchies, including cross-signed Certificates. Sectigo® Certificate Authority (CA) Hierarchy 🔗

Trustico® SSL Certificates work with any device that supports the use of an SSL Certificate. If you experience problems with ubiquity, it may be caused by an incorrect Intermediate Certificate or Root Certificate. Older devices may not work with every Intermediate Certificate, so install the ones most relevant to your environment. Understand Browser Ubiquity 🔗

Configure Your SSL Certificate Trust Seal

Most Popular Questions

Frequently asked questions covering SSL Certificate installation, including the files you need, where to find per-server instructions, how to verify the installation, and the free Trustico® tools for conversion and matching.

Files Needed for SSL Certificate Installation

A complete installation needs three components : your SSL Certificate file, provided by Trustico® after validation; the Intermediate Certificate(s) that establish the chain of trust; and your Private Key, generated when you created your Certificate Signing Request (CSR). All three must be correctly configured for the SSL Certificate to work.

Installation Instructions for Web Servers

Trustico® links to installation instructions for common platforms, including Apache, NGINX, and Microsoft Internet Information Services (IIS) versions 5.x through 8.x. You can also use the Mozilla SSL Configuration Generator or the Sectigo® SSL Certificate Installation Guides for other server types.

Verifying an SSL Certificate Installation

Use the Trustico® Chain Analyzer after installation to validate the complete SSL Certificate chain and check for missing Intermediate Certificates or configuration problems that can cause browser warnings. The Qualys SSL Server Test is also available for broader server testing.

The PFX Converter Tool

The Trustico® PFX Converter combines your SSL Certificate, Intermediate Certificate(s), and Private Key into a single PKCS#12 (PFX) file. That format is required for installation on Microsoft Windows servers and some other platforms.

Matching the Private Key to the SSL Certificate

Use the Trustico® Certificate and Private Key Matcher to confirm that your SSL Certificate and Private Key form a valid cryptographic pair before installation. This helps prevent errors caused by mismatched files.

Trustico® Installation Support

Trustico® provides detailed online documentation, tools, and resources to assist with installation. Dedicated installation support is not offered as standard, given the range of server configurations, but a Premium Installation service can be added at the time of ordering for Trustico® to install the SSL Certificate for you.

SSL Certificates and Front-of-Site Services Like Cloudflare

SSL Certificates and Front-of-Site Services Lik...

Learn how front-of-site services like Cloudflare affect which SSL Certificate visitors see and how to apply your purchased SSL Certificate to them.

SSL Certificates and Front-of-Site Services Lik...

Learn how front-of-site services like Cloudflare affect which SSL Certificate visitors see and how to apply your purchased SSL Certificate to them.

Understanding X9 Certificates and the Public Trust Model

Understanding X9 Certificates and the Public Tr...

Learn what X9 Certificates are, how X9 PKI differs from public browser trust, and why they are not a substitute for a publicly trusted SSL Certificate.

Understanding X9 Certificates and the Public Tr...

Learn what X9 Certificates are, how X9 PKI differs from public browser trust, and why they are not a substitute for a publicly trusted SSL Certificate.

Why Your SSL Certificate Type and Brand Matter by Industry

Why Your SSL Certificate Type and Brand Matter ...

Why the type and brand of SSL Certificate matter across regulated industries, who examines your validation standing, and what is at stake when they do.

Why Your SSL Certificate Type and Brand Matter ...

Why the type and brand of SSL Certificate matter across regulated industries, who examines your validation standing, and what is at stake when they do.

Revocation Status Errors on a Valid SSL Certificate

Revocation Status Errors on a Valid SSL Certifi...

A revocation status error such as RevocationStatusUnknown can appear on a valid SSL Certificate. Learn how to confirm it is not revoked and what to do next.

Revocation Status Errors on a Valid SSL Certifi...

A revocation status error such as RevocationStatusUnknown can appear on a valid SSL Certificate. Learn how to confirm it is not revoked and what to do next.

Website Security Checks : Essential Steps to Protect Your Business Online

Website Security Checks : Essential Steps to Pr...

Keep your website secure with the SSL Certificate checks that matter most, from expiry and chain coverage to validation levels, issuance controls, and automation.

Website Security Checks : Essential Steps to Pr...

Keep your website secure with the SSL Certificate checks that matter most, from expiry and chain coverage to validation levels, issuance controls, and automation.

Installing an S/MIME E-Mail Certificate in Mozilla Thunderbird

Installing an S/MIME E-Mail Certificate in Mozi...

Import a PKCS12 E-Mail Certificate into Mozilla Thunderbird, assign it for signing and encryption, and exchange secured messages with any recipient.

Installing an S/MIME E-Mail Certificate in Mozi...

Import a PKCS12 E-Mail Certificate into Mozilla Thunderbird, assign it for signing and encryption, and exchange secured messages with any recipient.

1 / 6