Certificate Lifecycle Management Reading Time: 3 minutes

Renewing Certificate on Apache with CertSecure Manager

In this comprehensive guide, you will learn how to renew a website certificate on an Apache web server that requests the certificate from CertSecure Manager. The step-by-step instructions in this article provide detailed guidance on how to manually renew certificates on the server. By following these instructions, you can ensure that your website remains secure and protected with an up-to-date SSL certificate.

Step-by-Step Guide to Renew Certificate

In the context of renewing certificates on Apache Web Server for websites hosted on it, there exist two viable options. Firstly, we can generate a Certificate Signing Request (CSR) using the CertSecure Manager. This approach entails creating a fresh private key and a CSR which contains the pertinent information about the website, such as its domain name, organization name, and other details. The CSR is subsequently submitted to a certificate authority (CA) for validation and issuance of a new certificate. 

Secondly, we can enroll a certificate directly from a pre-existing CSR. This can be executed if a CSR was previously generated and is obtainable for use. The pre-existing CSR is submitted to a CA for validation and issuance of a new certificate. 

The use of CertSecure Manager can facilitate the acquisition process of a certificate from a CA. This tool streamlines the labor-intensive and time-consuming procedures that are usually required for obtaining a certificate. By automating the certificate acquisition process, CertSecure Manager can save time and effort for website owners and administrators.  

Following the prescribed steps one can easily acquire a certificate from CertSecure Manager and renew it on desired website running on the Apache web server.

  1. Login to your CertSecure Manager, and navigate to ‘Generate Certificate’ in the Enrollment section present on the left side.

  2. Select the desired CA, Template, SAN attributes, and other necessary information and click on Generate Certificate

    Generate certificate from AIA
  3. Navigate to the Enrollment Inventory and find your certificate (check tasks for your enrollment ID). Download the PFX and navigate to the Apache server.

  4. Extract the private key from the PFX file using OpenSSL.

    openssl pkcs12 -in filename.pfx -nocerts -out key.pem -legacy

    Encrypt private key cmd

    The above command gives you the encrypted private key. If you want an unencrypted private key use:

    openssl pkcs12 -in filename.pfx -nocerts -nodes -out key.pem -legacy

    Decrypt private key cmd

    The prompt will ask you for the pfx password entered while exporting the certificate.

  5. You can extract the certificate directly using OpenSSL or simply by changing the extension of the certificate to “.pem”

    openssl pkcs12 -in myfile.pfx -nokeys -out certificate.pem -legacy

    Extract cert using openssl
  6. Place the certificate and key on the path where the certificate and key for your site are stored.
  7. Restart your server for the changes to take place.


Renewing certificates on any website hosted on an Apache web server is a breeze when you follow the outlined steps with confidence and precision. By doing so, you can rest assured that the certificate renewal will be a resounding success.

Free Downloads

Datasheet of Certificate Management Solution

Download our datasheet and discover the power of seamless certificate management with our CertSecure Manager


About the Author

Akashdeep Kashyap is a cybersecurity enthusiast who views the field not just as a profession, but as a pathway to unlocking the true essence of technology. His journey in cybersecurity is driven by a profound belief that understanding and securing digital systems illuminates our understanding of the broader tech landscape. Akashdeep approaches cybersecurity as a means of enlightenment, constantly seeking to unravel the complexities of digital security while embracing the ever-evolving world of technology.

Explore the full range of services offered by Encryption Consulting.

Feel free to schedule a demo to gain a comprehensive understanding of all the services Encryption Consulting provides.

Request a demo