SSL/TLS FAQs

Find answers to common questions about SSL/TLS certificate orders, domains, renewals, private keys, certificate formats and troubleshooting.

Orders and certificate management

• I ordered an HTTPS certificate for the wrong domain. Can I change it?
• Restricted domain names and regions
• Why is my certificate only valid for 200 days when I purchased multiple years?
• Why was my order cancelled before it was issued?
• Do I have to install a new SSL certificate during renewal?

Private keys and certificate formats

• How do I get a copy of my private key?
• How do I convert a PEM certificate to PFX?
• Change or add a password for a PFX using OpenSSL
• Convert a private key to RSA format

CSR and certificate requirements

• CSR does not contain a wildcard domain as expected
• I need a certificate with CA=True or KeyUsage=CertSign
• Can I get an EV SSL wildcard certificate?
• Can I order a certificate for an internal server name or private IP?

Troubleshooting

• Sectigo SSL certificates on Windows IIS — incorrect certificate chain
• ERR_SSL_VERSION_OR_CIPHER_MISMATCH
• SSL_ERROR_RX_RECORD_TOO_LONG
• Error 111: net::ERR_TUNNEL_CONNECTION_FAILED
• SSL certificate does not work on Parallels Panel / Plesk