> For the complete documentation index, see [llms.txt](https://docs.vngcloud.vn/vng-cloud-document/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.vngcloud.vn/vng-cloud-document/load-balancer/application-load-balancer/certificate/upload-a-certificate.md).

# Upload a certificate

To use SSL certificates, you must either have an existing SSL certificate or use a free SSL certificate provided by Let's Encrypt. GreenNode stores certificates securely; the storage system is encrypted, and certificates are inaccessible to anyone, including GreenNode employees.

The Certificate Manager supports uploading and managing two types of certificates:

* **TLS/SSL Certificates**
* **CA Certificates**

#### 1. Uploading TLS/SSL Certificates

1. **Access the Certificate Manager:** Go to `https://hcm-3.console.vngcloud.vn/vserver/load-balancer/certificate`.
2. **Click "Upload Certificate":** A pop-up window will appear for you to enter certificate information.
3. **Fill in Certificate Details:**
   * **Friendly Name:** We recommend using the domain name as the friendly name.
   * **Certificate Type:** Select "TLS/SSL."
   * **Certificate Input:**

     * **Certificate Content:** Paste your server certificate domain (usually with the \*.crt extension) in PEM format.

     ![](/files/KSOm3K2g7XpETuATi2lN)

     * **Private Key:** Paste the private key of the certificate (usually with the \*.key extension) in PEM format.

     ![](/files/PQfJGLcMAvCVi8Lhw4pg)

     * **Certificate Chain:** Paste the certificate chain, including the server certificate and any intermediate certificates (if applicable), in PEM format.
       * **Important:** Ensure the chain is in the correct order:

         ```
         ---BEGIN CERTIFICATE--- [Your certificate] ---END CERTIFICATE---
         ---BEGIN CERTIFICATE--- [Intermediate#1 certificate] (optional) ---END CERTIFICATE---
         ---BEGIN CERTIFICATE--- [Intermediate#2 certificate] (optional) ---END CERTIFICATE---
         ```
   * **Passphrase:** If the private key has a passphrase, enter it here. Otherwise, leave this field blank.
   * **Expiration:** The expiration date of the certificate.
4. **Click "Upload":** Click the "Upload" button in the bottom right corner to complete the upload.

#### 2. Uploading CA Certificates

1. **Access the Certificate Manager:** Go to `https://hcm-3.console.vngcloud.vn/vserver/load-balancer/certificate`.
2. **Click "Upload Certificate":** A pop-up window will appear for you to enter certificate information.
3. **Fill in Certificate Details:**
   * **Friendly Name:** We recommend using the domain name as the friendly name.
   * **Certificate Type:** Select "CA."
   * **Certificate Input:**

     * **Certificate Content:** Paste your CA certificate (usually with the \*.crt extension) in PEM format.

     ![](/files/VyqNm4n816z7Gk4mDBqC)
   * **Expiration:** The expiration date of the certificate.
4. **Click "Upload":** Click the "Upload" button in the bottom right corner to complete the upload.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.vngcloud.vn/vng-cloud-document/load-balancer/application-load-balancer/certificate/upload-a-certificate.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.