SSL certificates encrypt the data between your web browser and the web server hosting the website, keeping sensitive data submissions such as billing details safe. If you see a lock icon beside the website name in your browser, the site has an SSL certificate installed and your information is secured. This article covers the full SSL lifecycle in your Enom account: creating a CSR, purchasing and submitting the certificate, checking status, resending approval emails, installing CA bundles, and reissuing, renewing, or cancelling certificates.
Step 1: Create a CSR for your certificate
A Certificate Signing Request (CSR) is a unique code generated by a web server containing information about your website that is used to produce the final certificate. Anytime a CSR is generated, a private key is saved on the same server. Below is an example of what a CSR and a private key may look like.
Ask your web hosting provider to create a CSR so you can purchase your certificate. Depending on which certificate authority is used, there are different ways to generate the CSR on web servers.
Step 2: Purchase and submit your SSL certificate
Once you have generated the CSR, submit it within your account.
- Log in to your account and navigate to Security, followed by SSL Certificates and Manage.
- Click Add new to purchase a certificate and go through the checkout process.
- Return to the list of certificates in your account and select Not configured.
- Paste the full CSR and update the contacts if necessary, then click Submit certificate.
Important: Be sure to include the -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST----- lines in your CSR. If you receive any errors about your CSR, use a CSR checker to confirm you are submitting a valid CSR and fix any outstanding errors.
- Select an approval email address and click Submit certificate. You will shortly receive an email asking you to verify your domain. Only after this will you receive a second email with the certificate.
Note: The approval email addresses are generated by the certificate authority and cannot be modified. If you cannot create any of the addresses, submit a support ticket and request to change the approval method to add a host record entry to your domain DNS settings.
Step 3: View the status of your SSL certificate
- Navigate to Security, followed by SSL Certificates and Manage.
- View the status of all your certificates, or choose any domain name for more information.
- Once you select an SSL certificate, you can view its details.
| Heading | Description |
| Status | The current state of the certificate. Hover your mouse over the i icon for more information. |
| Expiration | The date the certificate is set to expire. |
| Order ID | Transaction number used by Enom to track the order. |
| Reference ID | A unique number used by the certificate authority to track the order. |
| Domain | The common name for the certificate, such as www.yourdomain.com. |
| Approval Email | The address the validation email is sent to. |
| Web Server Information | View the submitted CSR. |
| Contact Information | View the submitted contact information. |
Step 4: Resend the approval email
For Sectigo certificates, you can request DCV emails and change the DNS validation method using Sectigo's online tool or by contacting support.
For GeoTrust, RapidSSL, and DigiCert certificates, you can resend the email directly from your account.
- Navigate to Security, followed by SSL Certificates and Manage.
- Choose the certificate you want the approval email resent for.
- Select the Resend approval email link at the top of the page.
Note: It can take up to one hour for this email to arrive.
Step 5: Download the CA bundle for your SSL certificate
If your SSL certificate is returning as untrusted when visitors reach your website, you need to install the missing intermediate Certificate Authority (CA) files. Without these files, your SSL certificate is missing important files that web browsers need to verify your site as secure.
Most SSL certificate purchases already include these files in the fulfillment email you received. However, you can also download the CA bundle directly from your corresponding certificate authority.
- GeoTrust
- Sectigo
- A further breakdown for the intermediate certificates
- DigiCert
- RapidSSL
You can also download DigiCert and GeoTrust certificates from the guest portal.
Step 6: Reissue or renew an SSL certificate
DigiCert and GeoTrust certificates can be reissued through the guest portal without contacting support. To reissue a Sectigo certificate, submit a support ticket with the new CSR. Include the following in the request:
- SSL brand (DigiCert, GeoTrust, Sectigo)
- Order ID number
- Reference ID number
- Common name/domain
- Approval email address
There is no auto-renew option available. You must purchase a new SSL certificate of the same type and configure it with identical information to the original.
| Brand | Renewal period | Expiration after renewal |
| DigiCert | 89 days before expiration | 12 months* |
| GeoTrust | 89 days before expiration | 12 months* |
| RapidSSL | 30 days before expiration | 12 months* |
| Sectigo | 60 days before expiration | 12 months plus the remaining days left from the original Sectigo certificate. |
*For DigiCert, GeoTrust, and RapidSSL certificates, the remaining days do not carry over to the new certificate.
Step 7: Cancel an SSL certificate
If the certificate status is shown as issued and it is a Sectigo certificate, contact our support team with your request to cancel and include the certificate Order ID number.
For GeoTrust, RapidSSL, and DigiCert certificates that have not yet been issued, navigate to the certificate details page and click Cancel & modify settings.
DigiCert and GeoTrust certificates can also be revoked through the guest portal without contacting support.
Next steps
- Getting started with your SSL certificate
- Reissuing SSL certificates
- Accessing the DigiCert end-user portal
Questions? Contact Enom Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.