To enable HTTPS on your website, you need to get a certificate (a type of file) from a Certificate Authority (CA), such as Let’s Encrypt, ZeroSSL, and many more in the market.
Secure Sockets Layer (SSL) is a security protocol that creates an encrypted link between a web server and a web browser. It ensures that all transferred data remains confidential. You may have noticed the lock icon next to the URL in your address bar. That means the site is protected by SSL.
An SSL certificate keeps your customers’ sensitive information secure as they visit pages, read posts, submit interest forms, and purchase products.
Follow the steps mentioned below to create a new SSL certificate on ZeroSSL. Before you start, please note that you can choose from single-domain, multi-domain and wildcard certificates with a both 90-day or 1-year validity.
| QuickStart | Courtesy Links |
| Create a public domain in GoDaddy; This needs only at the time of domain owner verification step for CA to release SSL certification | https://dcc.godaddy.com/domains |
| Add DNS records in GoDaddy A record: Default IP address to local Windows server CNAME record: Uses to verify domain ownership and issue a free SSL from ZeroSSL | https://www.godaddy.com/help/manage-dns-records-680 |
| Generate CSR from local Windows Server > IIS > Server Certificate > Create Certificate Request | https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/hh831637(v=ws.11)?redirectedfrom=MSDN#create-certificate-wizard https://www.digicert.com/kb/csr-creation-ssl-installation-iis-10.htm |
| Create free SSL certificate from ZeroSSL | https://zerossl.com/https://app.zerossl.com/login |
| Submit above CSR and Setup SSL certificate in ZeroSSL and verify domain through Method 2 (DNS-CNAME) | https://help.zerossl.com/hc/en-us/articles/360060119373-Creating-an-SSL-Certificate https://zerossl.com/help/verify-domains/ |
| Download certificate to local Windows Server.certificate.crtca_bundle.crt | https://help.zerossl.com/hc/en-us/articles/360060120113-Download-Certificate |
| Install certificate & binding port 443Windows Server > IIS > Server Certificate > Complete Certificate Request | https://www.digicert.com/kb/csr-creation-ssl-installation-iis-10.htm |
