I guess so. I personally don't have experience with CertSage. And the instructions in the CertSage threads above do not mention the specific filenames. But certificate.key
, while a misnomer I guess (because the private key is not a certificate..), is probably it.
No worries, thanks for all your help anyway!
Welcome to the Let's Encrypt Community!
I'm the author of CertSage.
Firstly, I want to thank @Osiris for helping you out with using CertSage. Looks like you've made some great progress. Once you've acquired a production certificate using CertSage, which it seems you have, CertSage can also install that certificate into your cPanel for you. The most recently acquired certificate is kept within your CertSage data directory until overwritten or removed, so you should be able to do as @Osiris indicated in your CertSage by finding and using the button in CertSage that says "Install Certificate into cPanel". Be sure to enter/paste your password into the box directly above that button. As a note, a copy will remain in cPanel of every certificate (and corresponding private key) installed into your cPanel by CertSage, so you always have backup copies of your installed certificates and their private keys in your cPanel itself regardless of what certificate and private key currently reside in the CertSage data directory.
Yep. The two files certificate.crt
and certificate.key
are the certificate and its private key, respectively. They're named that way to distinguish them from account.key
and account-staging.key
, which are the ACME account keys for the Let's Encrypt production and staging environments, respectively.
So maybe I am looking in the wrong place but in the CertSage folder there is the account key, certificate crt and key, password and responses. I assume this button is elsewhere?
thanking you in advance! Amanda
Load http://amandagreenleestherapy.co.uk/certsage.php and you'll see the button about halfway down the page.
I guess something worked, as currently the website, when loaded using HTTPS, sports a brand-new cert issued today
Although unless @Scarlett29 managed to find out how to install it otherwise, they probably have found the install button
Now the only thing left to do is a HTTP to HTTPS redirect.
Hello again, I did that part already and then downloaded the certificate in the CertSage folder and uploaded it in the certificate section. Is that right?
I then tried to install and can't get past the 'private key' section unfortunately.
But someone or something did install the certificate @Scarlett29
Except my site still says it's not secure so I guess I have still done something wrong.
If you manually change http://
to https://
at the beginning in the address bar of your browser, you'll see the installation did work.
However, you need to reconfigure your website to redirect requests for HTTP (unsecure) to HTTPS (secure). That redirect is currently lacking.
Ahhh, I have checked the 'force http to https'. OMG. At last! I hope it's actually the CertSage certificate I have on there after all that
Thank you both SOOOOOOO much, I am really really grateful for your time today.
Best, Amanda
It is
You can check the cert your server is using at various sites. SSL Labs is one we often recommend. Browsers often show the cert too if you click their security info icons.
https://www.ssllabs.com/ssltest/analyze.html?d=www.amandagreenleestherapy.co.uk&hideResults=on
The install button in CertSage does that.
Sometimes it takes a few minutes for it to kick in.
But in this case OP needed to select it manually somewhere? I'm not fully convinced what mechanism actually installed the certificate, because @Scarlett29 mentioned they also tried to install it manually?
Hmm, I guess I did fail to install CertSage then as I had to manually force redirect. I'll take another look when my headache goes!
You shouldn't have needed to upload (or even touch) your certificate manually. The install button in CertSage should take care of the certificate installation and toggling the force HTTPS.
I can also confirm successful certificate installation though:
https://decoder.link/sslchecker/amandagreenleestherapy.co.uk/443
Is it actually CertSage?? If so, I am beyond impressed!