To install a wildcard SSL certificate on multiple servers using the DigiCert Certificate Utility, you must first install it on the original Windows server (where the CSR was generated), then export the certificate and its private key as a PFX file, and finally import that PFX file onto your additional servers.
Part 1: Initial Installation and Export on the First Server (Windows)
- Install the certificate on the original server. After you receive the certificate files from DigiCert (usually a
.cerfile), use the DigiCert Utility to import it to the same Windows server where you created the CSR. The utility should automatically link the public certificate with the private key generated during the CSR process. - Export the certificate as a PFX file.
- Run the DigiCert Certificate Utility for Windows and click SSL (gold lock).
- Select the certificate you just imported and click Export Certificate.
- In the export wizard, select Yes, export the private key and choose the
.pfx fileformat. Ensure the option Include all certificates in the certification path if possible is checked. - Create and confirm a strong password for the PFX file. You will need this password to import it onto other servers.
- Browse to a save location and provide a file name (e.g.,
wildcard_cert.pfx), then click Finish.
Part 2: Import and Configuration on Additional Servers
- Transfer the PFX file to the additional servers you want to secure.
- Import the PFX file using the DigiCert Utility.
- On the additional server, run the DigiCert Certificate Utility for Windows.
- Click SSL and then click Import.
- Browse to the location of the PFX file, select it, and click Next.
- Enter the password you created during the export process and click Next.
- Type a friendly name (e.g.,
yoursite-digicert-(expiration date)) and click Finish. The certificate should now appear in the utility's list.
- Configure the server software (e.g., IIS, Exchange, etc.) to use the newly imported certificate for your website or application bindings. The exact steps will depend on your specific server platform; you can find server-specific instructions on the DigiCert website.
Note on different platforms:
If your additional servers run different operating systems (e.g., Linux/Apache), you may need to export the certificate in a different format (like Apache-compatible
If your additional servers run different operating systems (e.g., Linux/Apache), you may need to export the certificate in a different format (like Apache-compatible
.key and .crt files) using the DigiCert Utility and follow the server-specific installation instructions for that platform. 