FallProGroup.com SSL Re-issue and Installation
This Job aid not complete, but should have enough info to complete the SSL -re-issue etc
Create CSR Command
Go to
https://www.digicert.com/easy-csr/openssl.htm
and use the supplied template to create a new a command to be used in the terminal on the racksapce server to create a new CSR and key file
use the following Details when creating the CSR (Certificate Signing Request)
Primary Domain
fallprogroup.com
Add-On Domains
livestage.fallprogroup.com
www.fallprogroup.com
Server Type
Apache, cPanel, or Other
Hashing Algorithm
SHA-2
Email
[email protected]
Company
Fall Protection Group
Department
Head Office
Location
Airdrie, Alberta, CA
Click Generate
This will create the command you need to use within terminal on the server to create the actual CSR
Copy the command
openssl req -new -newkey rsa:2048 -nodes -out fallprogroup_com.csr -keyout fallprogroup_com.key -subj "/C=CA/ST=Alberta/L=Airdrie/O=Fall Protection Group/OU=Head Office/CN=fallprogroup.com"
Generating CSR
Log into the rackspace server
Change directory to home/SSL wehre store store a copy fon thre CSR and certs with this command
cd ~
cd ssl-keys/
#then make a new folder to store the csr and key in ( temporarily)
mkdir new
#now you have a folder name new- move to that folder
cd new
#now run the command to create the CSR
openssl req -new -newkey rsa:2048 -nodes -out fallprogroup_com.csr -keyout fallprogroup_com.key -subj "/C=CA/ST=Alberta/L=Airdrie/O=Fall Protection Group/OU=Head Office/CN=fallprogroup.com"
Open the .csr file and copy the contents
shold be somthings like this:
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----
Login into the NameCheap.com website and go the SSL area
If doing a re-isse , select re-issue form the drop down
Paste the CSR text and click next
Validate the Certificate
you will need to validate the crt/ do this go to this page (you will need to clidk the edit drop down and select create cname (??), this will bring up a new page with cname records which need to be aded to the DNS.
You will need to login into Rackspace , navigate to network/cloud DNS then add the appropriate CNAme records (create by namecheap)
NOTE when copy/pasting from namecheap DO NOT COPY the fallprogroup.com portion, once validated you can download the completed CRT file
Copy files to the Rackspace server
Using transmit copy crt and bundle files to the following directory
/home/ssl-keys/new
Now create a folder inside home/ssl-keys/fallprogroup.com and name with the current year ie 2025-2026 and copy the files into that (this is only archive storage)
Make sure to copy the .csr and .key files back to the local directory on your mac
Copy the