To secure a site with https, there are six steps (detailed below):
1. Activate the SSL add-on
2. Generate a CSR
3. Submit the certificate order
4. Approve the certificate order
5. Install the Web Server Certificate
If you are renewing a certificate, the process will be identical to ordering a new certificate, but starting with step 2, Generate New CSR. The renewal will issue a new SSL certificate that will be installed to replace the existing one, rather than extending the expiration of the existing certificate.
Activate the SSL add-on
The SSL add-on may be enabled for an additional $10 per month. After logging into the DiscountASP Control Panel click the SSL Management link for an overview of the add-on. Then use the "Click Here to go to SSL Add-on Order Page" link to proceed to the activation page.
Finally click the "Activate SSL Addon" button to allow CSR generation.
If the unlimited subdomains add-on was not already enabled, a Unique IP will be provisioned for the site after the SSL add-on is activated. If hosting DNS through DiscountASP, no updates are necessary. But if hosting DNS externally, for example through the domain registrar, the A Record IP will need to be updated. The new IP can be found in the DNS Manager. See the below screenshot for reference.
Alternatively, SSL support is included for the hosting plans at our sister hosting copany,
Everleap. If you wish to move to Everleap, migration assistance is available for active DiscountASP site accounts.
Generate the CSR
With the SSL add-on active, the ability to create a CSR will be available in the SSL Management section of the DiscountASP Control Panel (highlighted in red below). The CSR is provided to the certificate authority to issue the SSL certificate. Please note that it is not the SSL certificate itself.
CSR fields
Common Name: The domain name being secured. For example, discountasp.net. Or *.discountasp.net if ordering a Wildcard certificate
Organization: The legal name of your organization - or - use your name.
Organization Unit: The department in the organization handling the SSL certificate.
City / State / Country: City / State / Country where your organization is located.
After filling out the fields, click the Submit CSR Information button and the SSL Manager will update with a link to order the SSL Certificate (highlighted in red).
Submit the certificate order
From the Purchase SSL Certificate page, select the desired certificate type via radio button. Most will select RapidSSL, as it is included with the SSL Add-on.
Approver email contact
After selecting the certificate type, the page will refresh. We will list the all the standard SSL approver email contact addresses that the SSL industry uses for verification. In the order process, you will also have the ability to submit an admin contact email address.
After submitting the SSL certifcate order, you will receive an email to verify and proove you have access to the domain. If you are using the included RapidSSL certificate, you will receive and email from
[email protected].
If all the information is correct, use the Purchase button to complete the order.
Note regarding CSR regeneration
Note, if rekeying the certificate, make sure to not revoke / cancel the certificate order. Revoking the certificate would mean it is completely invalid and a new certificate would need to be purchased to replace the original certificate.
Approve the certificate order
Barring any issues with the approver email address, the approver email should be received shortly after the order is submitted. Validate domain ownership with the link provided in the email to receive the SSL certificate at the admin contact email address.
Install the Web Certificate
After approval, an email will be received with a PEM file attached. A PEM file is a text file that can be opened with a text editor like notepad. After opening the file you will see three certificates, but only the first is required. Copy the entire block of text, including the "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----" notations, as in the below example, and paste into the "Install Your SSL Certificate" field at the bottom of the SSL Manager and click the Install Certificate button to complete the process.
Force https
To avoid a "not secure" message in a browser, a forced https redirect will be necessary. For more information, see the
Force https with URL rewrite knowledge base article.