{"id":827,"date":"2019-11-04T01:39:56","date_gmt":"2019-11-04T01:39:56","guid":{"rendered":"https:\/\/netlab.com.ph\/?p=827"},"modified":"2025-10-17T00:28:14","modified_gmt":"2025-10-17T00:28:14","slug":"sectigo-comodo-certificate-renewal","status":"publish","type":"post","link":"https:\/\/netlab.com.ph\/?p=827","title":{"rendered":"Sectigo \/ Comodo Certificate renewal"},"content":{"rendered":"\n<p>So, its time for your SSL certificate renewal. You need to generate a new Certificate Signing Request (CSR) using OpenSSL w\/ Apache + mod_ssl together with your Public Key and submit these to Sectigo or your favorite third party SSL vendor.<\/p>\n\n\n\n<p>To generate your keys and certificate on your CentOS server using command line:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><strong># openssl req -nodes -newkey rsa:2048 -keyout domain.key -out yourdomain.csr<\/strong><\/pre>\n\n\n\n<p>These will generate two files: domain.key which is your private key and yourdomain.csr which is your CSR.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/netlab.com.ph\/wp-content\/uploads\/2019\/11\/CSR-1.png\" alt=\"\" class=\"wp-image-831\"\/><\/figure>\n\n\n\n<p>The extra attributes can be left blank particularly if this is a domain SSL certificate, else you need to supply the password every time you start Apache.<\/p>\n\n\n\n<p>Submit and pay your renewal fees and wait for them to email your certificates.<\/p>\n\n\n\n<p>You will be receiving these following certificates:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Root CA Certificate &#8211; AddTrustExternalCARoot.crt<\/li>\n\n\n\n<li>Intermediate CA Certificate &#8211; USERTrustRSAAddTrustCA.crt<\/li>\n\n\n\n<li>Intermediate CA Certificate &#8211; SectigoRSAOrganizationValidationSecureServerCA.crt<\/li>\n\n\n\n<li>Your PremiumSSL Certificate &#8211; abc.com.ph.crt<\/li>\n<\/ul>\n\n\n\n<p>Make a bundle file from all your CRT files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><strong># cat SectigoRSAOrganizationValidationSecureServerCA.crt USERTrustRSAAddTrustCA.crt AddTRustExternalCARoot.crt &gt;&gt; 2019_ssl_sectigo.crt<\/strong><\/pre>\n\n\n\n<p>Update your apache.conf file under &lt;VirtualHost&gt; section with the new certificate files then restart your web server.<\/p>\n\n\n\n<p><strong>For Windows Servers:<\/strong><\/p>\n\n\n\n<p>To create a pfx file:<\/p>\n\n\n\n<p><strong># openssl pkcs12 -export -in 2019_ssl.crt -inkey 2019_ssl.key -certfile 2019_ssl_sectigo.crt -out 2019_ssl.pfx<\/strong><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Update: <\/strong>October 17, 2025<\/p>\n\n\n\n<p>To make a bundle file from all your CRT files:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><strong># cat SectigoPublicServerAuthenticationCADVR36.crt USERTrustRSACertificationAuthority.crt SectigoPublicServerAuthenticationRootR46_USERTrust.crt >> 2025_ssl_sectigo.crt<\/strong><\/pre>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>So, its time for your SSL certificate renewal. You need to generate a new Certificate Signing Request (CSR) using OpenSSL w\/ Apache + mod_ssl together with your Public Key and submit these to Sectigo or your favorite third party SSL <a href=\"https:\/\/netlab.com.ph\/?p=827\" class=\"read-more\">Read More &#8230;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-827","post","type-post","status-publish","format-standard","hentry","category-linux-admin"],"_links":{"self":[{"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/posts\/827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=827"}],"version-history":[{"count":7,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/posts\/827\/revisions"}],"predecessor-version":[{"id":1172,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=\/wp\/v2\/posts\/827\/revisions\/1172"}],"wp:attachment":[{"href":"https:\/\/netlab.com.ph\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netlab.com.ph\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}