How to Install SSL Certificate on Your WordPress Site

If you are running an ecommerce site, accepting credit cards, or passing information that needs to be encrypted, you’ll need to install an SSL certificate on your WordPress site. Having an SSL certificate will enable HTTPS and this ensures that no information is passed in plain text. In fact, we recommend all sites utilize HTTPS, as it has a lot of additional benefits beyond security. Follow the steps below on how to install SSL on your WordPress site.

How to Install SSL Certificate

You have three different options when it comes to installing an SSL (TLS) certificate on your WordPress site. Also see information on checking your SSL certificate, renewing, and removal.

Option 1 – Install Free SSL certificate
Option 2 – Install Custom SSL certificate
Option 3 – Install SSL certificate with Cloudflare or Sucuri
Check SSL certificate
Renew SSL certificate
Remove Custom SSL certificate

Option 1 – Install Free SSL Certificate With Let’s Encrypt

Setting up SSL with our Let’s Encrypt integration is as easy as 123. Make sure your domain is pointed at Kinsta before proceeding. If you are using Cloudflare or Sucuri, skip down to Option 3.

Current Limitations

All domains/sub-domains need to be added manually on the dashboard
Limitation of 100 sub-domains
Let’s Encrypt certificates are domain validated only (they don’t have warranties)
Limitations on domains with special characters

Step 1

Select a site in MyKinsta.

Step 2

Click on “Tools” and under Enable HTTPS click on “Generate A Free HTTPS Certificate.”

Choose the free Let’s Encrypt SSL.

Step 3

In order for a certificate to be generated successfully you must have at least one live domain pointed at Kinsta via an A record. You will then have an option to choose the domains on which you want an SSL certificate installed. If your site is http://domain.com and has a redirect from www to non-www, you will still want to select both for the HTTPS redirect. Click on “Generate Certificate.” (Note: You will need to add all of your domains prior to this from the MyKinsta dashboard, including any subdomains which require SSL)

Important

Kinsta only supports A records (IPV4) at this time. If the domain of your Kinsta site has an AAAA record (IPV6), be sure to delete the AAAA record before generating an SSL certificate. If you do not remove the AAAA record, the SSL issuance process will fail.

Select domains for SSL.

And that’s it! It will take a few seconds or so to install and your site should be all secured.

Option 2 – Install Custom SSL Certificate

Step 1 – Purchase SSL Certificate

Purchase your SSL certificate from any vendor you like such as Comodo, DigiCert, GeoTrust, Thawte, or Trustwave. Kinsta supports all types of SSL certificates, including wildcard certificates.

Step 2 – Server Type

When purchasing a new SSL certificate, you are asked to provide the server type. The type of our web servers is Nginx, if that option is not available, then “Apache” or “Other” will work as well.

Step 3 – Generate CSR and Private Key

A CSR code will be needed by the SSL provider to create/sign the certificate file. For generating a CSR code and RSA key, please complete the following form: https://www.ssl.com/online-csr-and-key-generator/.

We recommend filling out every field, but at a minimum, you should fill in the following as seen in the example below:

Common name (domain name)
Email Address
Organization
City / Locality
State / County / Region
Country

Note: For the common name field, if you are generating a wildcard certificate, you will need to input your domain name like *.domain.com.

Generate CSR form

The form will generate you the private key file and the CSR. Make sure to save both of those as the certificate will be unusable without them.

CSR and private key

Step 4

Upload your CSR with your SSL provider to regenerate your SSL certificate (.cert).

Step 5

Log in to the dashboard, click on a site, go to the Tools tab and click the “Add Custom HTTPS Credentials” button to get started.

Install SSL certificate on WordPress.

Step 6

To use custom credentials you will need to have a .key and a .cert file prepared. Then click “Next.”

Custom HTTPS verification.

Step 7

You will then be able to add your private key and certificate. Note: Some customers will also want to add their intermediate certificate as well. Most SSL providers will email you a .crt file and a .ca-bundle file. Paste the contents of your .crt file in the “Certificate” section first and then the contents of the .ca-bundle file below it. You can use a text editor like Notepad or TextMate to open the certificate and bundle files. If you don’t have or know your intermediate certificate you can use a free tool like https://whatsmychaincert.com/ to generate it. Then click “Apply Certificate.”

Apply custom SSL certificate.

Option 3 – Install SSL Certificate With Cloudflare or Sucuri

Cloudflare and Sucuri are what are known as reverse-proxy services. You can think of them as a middleman. You point your DNS to them, and in turn they route your requests to Kinsta’s servers. Because of this, there are a few additional steps you need to take to ensure SSL certificates are properly installed.