Hello,
I have installed SSL certificate to my domain, via Russian hosting company Beget.ru (which supports auto install of Let’s Encrypt sertificates), but I also have a subdomain for that domain and want to install SSL on this subdomain too, but I can’t install SSL on this subdomain like on the main domain (via hosting company), because this subdomain is directed to another server.
So I need to install SSL for my subdomain on the other server where it is directed, but problem is that this server needs me to upload PEM file, where would be merged certificate, and its private key (“To link the certificate you need to generate pem-file merging certificate, intermediate certificates (if it exist) and the private key”).
So I need sertificate and it’s private key to generate PEM file which will help me to install SSL sertificate for subdomain on another server. Is there anyway to get certificate by manual?
It’s not quite clear whether you have an access to a command line to generate your certificate or not (since you might be using something specific for that hosting company you mentioned).
If you can use a command line, then it depends on what kind of Let’s Encrypt client is installed. For example, the official one has an option for manual mode. I do believe that alternative clients would have something similar, though I can only be sure about mine (Crypt::LE), since I haven’t tested those.
If you have your Let’s Encrypt account key for example in the account.key file and your subdomain is “some.domain.com”, then running it like this would do the job:
You would be asked to put a specific text into a file with a specific name under .well-known/acme-challenge/ in the webroot directory of that server which your subdomain is pointing to and press Enter. After that you can find the key and certificate you’ve asked for in some-domain.key and some-domain.crt.
I don’t even have permission to access server directories (where the subdomain is directed). I can only put this kind of certificate datas in the PEM file and then upload this file to site, which administrates the server.
If the published above data is not from some test run against staging server, I would recommend to remove it, revoke the certificate and re-generate key/cert.
As for the question - it’s still now clear how do you verify the ownership of that subdomain (considering that you don’t have permissions to access directories there)? Can you add DNS records? How did you do it for the main domain for example?
let me tell you like this. especially if you dont have access to a command line, manual mode is going to be a pain.
honestly in that case you are better with startssl, they may allow just 5 domains but the process is a lot more straight forward and easy.
you may not use wildcards (*) but that’s the same for letsencrypt.