Namecheap Free Comodo SSL Certificate Replacement Symantec SSL Application Process

Snail personally has always preferred Namecheap merchants. Many domain name registrars currently have few promotions. Every year, whether it is Black Friday, Cyber ​​Monday, or several public welfare activities and festivals, they also launch domain name registration and transfer. Enter discount. Last night, I believe that many of my friends, like Snail (if they have registered an NC account), received activities from Namecheap merchants. This activity is quite influential. If our website needs to use SSL certificates, we can apply for Comodo SSL for free. Certificate (originally paid).

This event is aimed at what many of our friends have seen a few days ago. Chrome will gradually no longer support Symantec SSL certificates, whether we apply for paid Symantec related certificates or apply for free (6 free SSL certificates) Applying for cost-saving configuration of website HTTPS encrypted URL) is an opportunity to replace the certificate for free, and you can apply for free for at least 1 year.

First, prepare to apply for a free Comodo SSL certificate

1. The domain name applying for a free Comodo SSL certificate must already be using a Symantec SSL certificate. If you do not use an SSL certificate, you will not be able to apply.

2. If our original certificate is related to Symantec, RapidSSL, Geotrust and Thawte SSL series, you can apply.

3. We need a Namecheap account anyway, otherwise we won’t be able to apply.

Second, free Comodo SSL certificate application process

1. Application address entrance

Application address: https://www.namecheap.com/symantec-replace/

2. Submit domain name application

Here we need to submit the domain name we are applying for. We need to make sure that the SSL of the current domain name is available and it is one of Symantec, RapidSSL, Geotrust, and Thawte SSL certificates before we can apply for a free replacement.

If our current domain name certificate meets the conditions, we can check it and see the prompt in the picture above to apply. The first year is free, and the renewal for the next year is US$9, which is not very expensive. If there is no problem, click Activate free SSL.

3. Apply to set up an SSL certificate

A – Set up CSR

CSR needs to be set here, you can refer to here: https://www.namecheap.com/support/knowledgebase/article.aspx/9446/0/apache-opensslmodsslnginx. Execute the script and generate the CSR.

openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

Follow the prompts to set the options and copy them into the text box to continue. There is a technical issue here. Some information can be entered or written randomly, but we cannot write "Common Name" randomly. We can only write the domain name we applied for, otherwise the generated CSR will prompt an error. .

B – Verify domain ownership

This should be Verify Ownership, I select the DNS option and continue.

C - Complete personal information

You need to fill in the certificate information, but most of them are optional, so don’t write it down. Find the ones that need to be filled in, and finally fill in the email address to receive the information. Finally, we check whether the domain name is correct and click Submit.

Third, Namecheap free Comodo SSL certificate verification ownership

1. Miraculous things

Originally Snail came in to see how to verify the domain name ownership, because it had not been verified before, but I saw the picture above, didn’t it say 1 year, and the second year was charged, but why is it 3 years, then don’t care , we can only accept it.

2. Verify domain name ownership

We go to the current SSL certificate status and find \\"DCV Methods in Use\\", and then according to the informed information, I use DNS resolution to verify. Here we perform parsing and verification based on the actual settings.

We should know how to resolve CNAME aliases, right? After the analysis is completed, we just wait and wait for the approval before we deploy the site to use this Comodo SSL certificate. After submitting, if you feel the waiting time is too long, just ask online customer service to get it through quickly. Their customer service is really good.

Fourth, Namecheap deployment and configuration of SSL certificate

Configuring the certificate is simple. Copy the script inside the file we downloaded, especially the file with the .ca-bundle suffix, and then throw it to the bottom of .crt without any blank lines. At the same time, remember that we don’t have the .key file we started producing. Just these two files are enough. Just replace the .key and .crt in our certificate.

After the replacement is completed, we restart apache or nginx, depending on our own configured environment.

It’s really been three years, it’s amazing.

Fifth, Namecheap free SSL certificate application summary

1. Before applying, we must use an SSL certificate that meets the free conditions for the domain name. Snail applied for it using Alibaba Cloud’s free Symantec certificate. The Western Digital free SSL certificate that we applied for before did not meet the conditions. Please go back and find some time to get it. Here is a tutorial on how to apply for a Symantec certificate from Alibaba Cloud.

2. The process of submitting the CSR and verifying the domain name is a little complicated, but it is not difficult and can be achieved by following the steps. If you have any questions during the process, you can also ask the online customer service. Personally, I prefer NC’s online customer service. The service is really good.

3. It was originally said to be for one year, but after applying I found out that it was for three years. This is really good. However, whether the second and third years are free depends on the actual situation after the expiration of one year, or there is a bug.

Recommended site searches: IP reverse domain name, Alibaba Cloud free virtual host, Singapore server, foreign server, website space registration-free, free space in mainland China, vps virtual server, US website domain name, in domain name, Korean high defense server,