{"id":2033,"date":"2025-08-19T19:55:11","date_gmt":"2025-08-19T19:55:11","guid":{"rendered":"https:\/\/certpanel.com\/resources\/?page_id=2033"},"modified":"2025-08-19T19:55:12","modified_gmt":"2025-08-19T19:55:12","slug":"how-to-install-an-ssl-certificate-on-debian-apache2","status":"publish","type":"page","link":"https:\/\/certpanel.com\/resources\/expert-guides\/ssl-tls-installation-and-automation\/how-to-install-an-ssl-certificate-on-debian-apache2\/","title":{"rendered":"How to Install an SSL Certificate on Debian (Apache2)\u00a0"},"content":{"rendered":"\n

As a website owner, using HTTPS is essential to securing user data, improving SEO, and gaining visitor trust. In this guide, you\u2019ll learn how to manually install and configure an SSL certificate on Debian and how to automate the process using CertPanel AutoInstall SSL<\/a>.<\/p>\n\n\n\n

The manual path suits users who want full control over files and configuration, while automation offers a simple, beginner-friendly option for users who want to set their server certificate installation tasks on autopilot.<\/p>\n\n\n\n

\n
Learn About AutoInstall SSL<\/a><\/div>\n<\/div>\n\n\n\n\n\n\n\n

Start by Getting an SSL Certificate<\/strong><\/h2>\n\n\n\n

You\u2019ll need a valid SSL\/TLS certificate before starting. You can choose from a range of DV, OV, EV, multi-domain, and wildcard certificates from publicly trusted certificate authorities (CAs) (e.g., Comodo CA).<\/p>\n\n\n\n

\n
Shop SSL\/TLS Certificates<\/a><\/div>\n<\/div>\n\n\n\n\n\n\n\n

How to Manually Install an SSL Certificate on Apache2 (Debian)<\/strong><\/h2>\n\n\n\n

Step 1: Generate a Private Key and CSR<\/strong><\/h3>\n\n\n\n

Begin by generating a private key on your server, which will be used to create a certificate signing request (CSR):<\/p>\n\n\n\n

sudo openssl genrsa -out \/etc\/ssl\/private\/example.com.key 2048<\/code><\/pre>\n\n\n\n
Then, create the CSR:<\/p>\n\n\n\n
sudo openssl req -new -key \/etc\/ssl\/private\/example.com.key -out \/etc\/ssl\/certs\/example.com.csr <\/code><\/pre>\n\n\n\n
This command will bring up a list of fields for you to complete regarding your domain and organization:<\/p>\n\n\n\n
\"A
Image caption:<\/em><\/strong> A screenshot showcasing the types of data that you must provide when completing a certificate signing request when preparing to install an SSL certificate on Apache2 Debian.<\/em><\/figcaption><\/figure>\n\n\n\n
Submit the CSR to your chosen certificate provider. For this step, if you\u2019ve purchased a certificate through our website, you can submit the CSR in CertPanel when enrolling for your certificate. This can be done by navigating to All Orders<\/strong> > Get Started<\/strong> > Submit CSR<\/strong> in the CertPanel dashboard.<\/p>\n\n\n\n
\"A
Image caption:<\/em><\/strong> An example showing the redacted CSR information between the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST tags.<\/em><\/figcaption><\/figure>\n\n\n\n
Step 2: Validate Your Domain<\/strong><\/h3>\n\n\n\n
CertPanel offers several methods of domain control validation (DCV), including HTTPS-based validation, which is fast and easy to use.<\/p>\n\n\n\n
\"A
Image caption: <\/em><\/strong>A screenshot showing where you can select your preferred DCV method in the CertPanel dashboard from the list of available options.<\/em><\/figcaption><\/figure>\n\n\n\n
After initiating domain validation, you\u2019ll receive a .txt file from the certificate provider. In CertPanel, you\u2019ll find this information in the Certificate Validation section after completing the certificate enrollment process.<\/p>\n\n\n\n
\"A
Image caption:<\/em><\/strong> A screenshot showing where to locate the file used for the HTTP file-based domain validation in CertPanel.<\/em><\/figcaption><\/figure>\n\n\n\n
Upload the file to this directory:<\/p>\n\n\n\n
\/var\/www\/html\/.well-known\/pki-validation\/<\/code><\/pre>\n\n\n\n
If this directory doesn\u2019t exist, you can create it using the following commands:<\/p>\n\n\n\n
sudo mkdir -p \/var\/www\/html\/.well-known\/pki-validation\/\nsudo nano \/var\/www\/html\/.well-known\/pki-validation\/filename.txt<\/code><\/pre>\n\n\n\n
\"A<\/figure>\n\n\n\n
Paste in the contents, save, then enable SSL and restart Apache:<\/strong><\/p>\n\n\n\n
sudo a2enmod ssl\nsudo systemctl restart apache2 <\/code><\/pre>\n\n\n\n
Once this step is complete, you\u2019ll want to visit the validation URL in your browser to confirm the changes have taken effect. If you see a message like the following (below), go back to your CertPanel screen and click Request Verification<\/strong>.<\/p>\n\n\n\n
\"A
Image caption:<\/em><\/strong> A demonstration of what it looks like when you\u2019ve uploaded the HTTP challenge validation files to the specified file path on your server.<\/em><\/figcaption><\/figure>\n\n\n\n
Step 3: Download, Upload, and Organize Your Certificate Files<\/strong><\/h3>\n\n\n\n
After validation, download the issued certificate files from your certificate provider. (Again, if you\u2019ve bought one of our certificates, you can do this in CertPanel.) You\u2019ll receive the following in a .zip<\/em> file:<\/p>\n\n\n\n