← Help / Install your certificate

How to install an SSL certificate in Plesk

What you will have

Your certificate, which names your domain (a file such as example_com.crt).
The CA bundle, also called the chain or the intermediate certificates (a file such as example_com_CA.crt). It normally holds two certificates, one after the other.
Your private key, made when you created the CSR. It stays on your server.

The file names on your download may differ. Your certificate is the one that names your domain. The bundle holds the authority's certificates. Always put your certificate first, then the bundle. If you are not sure which file is which, paste them into our chain builder.

Install it into the same certificate entry you made when you created the CSR. That entry holds the matching private key. Do not make a new one.

Open Websites & Domains, your domain, then SSL/TLS Certificates.
Click the name of the certificate you created for the CSR.
In the section for uploading certificate files, paste your certificate into Certificate (*.crt) and the CA bundle into CA certificate (*.ca-bundle).
Click Upload Certificate.
Go to Hosting & DNS → Hosting Settings for the domain (some versions: Websites & Domains → Hosting Settings), tick SSL/TLS support, pick the certificate in the Certificate list and click OK.

Menu names can differ slightly between Plesk versions. If the old certificate is still shown on the site, check that this new one is the one selected in Hosting Settings.

Check it worked

Use our free certificate checker on your website address. It shows the certificate, when it expires, whether the name matches and whether the whole chain is being sent. If it says the chain is incomplete, see how to fix an incomplete chain. If the old certificate is still showing, see why the old certificate still appears.

More in this section

Stuck? Call 03333 444 205 (Monday to Friday, 9am to 5pm, except public holidays) or use our contact form. We will help you get it working.

Browse certificates → Free SSL tools →