Downloading a Private Certificate

Before using a private certificate, you need to download it. Only downloaded certificate can be assigned to the corresponding certificate subject so that they can install and use the certificate.

This topic describes how to download a private certificate. Only certificates in the Issued state can be downloaded.

Prerequisites

Your private certificate is in the Issued state. For details, see Applying for a Private Certificate.

Procedure

Log in to the management console.
Click in the upper left corner of the page and choose Security > Cloud Certificate Management Service. In the navigation pane, choose Private Certificate Management.
Locate the row of the desired private certificate and click Download in the Operation column.
Click the target tab based on your server type and click Download Certificate.

When you click OK, CCM will use the download tool provided by the browser to download the private certificate to the specified local directory.

Installing a Private Certificate

After downloading the private certificate, install it on the client or server.

To install a certificate on a client, see Installing a Private Certificate on a Client.

To install a certificate on a server, see Table 1.

**Table 1** Example for installing a private certificate
Server Type	Operation
Tomcat	Installing a Private Certificate on a Tomcat Server
Nginx	Installing a Private Certificate on an Nginx Server
Apache	Installing a Private Certificate on an Apache Server
IIS	Installing a Private Certificate on an IIS Server
Weblogic	Installing an SSL Certificate on a WebLogic Server
Resin	Installing an SSL Certificate on a Resin Server

Description of Downloaded Certificate Files

The downloaded certificate files vary depending on the CSR file type (System generated CSR or Upload a CSR) configured when you apply for a private certificate.

System generated CSR

Table 2 describes the downloaded files.

**Table 2** Description of downloaded files (1)
Server Type	Files in the Package
Tomcat	keystorePass.txt: certificate password server.jks: certificate file
Nginx	server.crt: certificate files, containing the server certificate and certificate chain server.key: certificate private key file
Apache	chain.crt: certificate chain file server.crt: certificate file server.key: certificate private key file
IIS	keystorePass.txt: certificate password server.pfx: certificate file
Others	chain.pem: certificate chain file server.key: certificate private key file server.pem: certificate file

Upload a CSR

Table 3 describes the downloaded files.

**Table 3** Description of downloaded files (2)
Server Type	Files in the Package
Tomcat	server.crt: certificate file chain.crt: certificate chain file
Nginx	server.crt: certificate file
Apache	server.crt: certificate file chain.crt: certificate chain file
IIS	server.crt: certificate file chain.crt: certificate chain file
Others	cert.pem: certificate file chain.pem: certificate chain file