# Upload a certificate

To use SSL certificates, you must either have an existing SSL certificate or use a free SSL certificate provided by Let's Encrypt. GreenNode stores certificates securely; the storage system is encrypted, and certificates are inaccessible to anyone, including GreenNode employees.

The Certificate Manager supports uploading and managing two types of certificates:

* **TLS/SSL Certificates**
* **CA Certificates**

#### 1. Uploading TLS/SSL Certificates

1. **Access the Certificate Manager:** Go to `https://hcm-3.console.vngcloud.vn/vserver/load-balancer/certificate`.
2. **Click "Upload Certificate":** A pop-up window will appear for you to enter certificate information.
3. **Fill in Certificate Details:**
   * **Friendly Name:** We recommend using the domain name as the friendly name.
   * **Certificate Type:** Select "TLS/SSL."
   * **Certificate Input:**

     * **Certificate Content:** Paste your server certificate domain (usually with the \*.crt extension) in PEM format.

     ![](https://1985221522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7rE7M1L7GYcwQzNGd0aB%2Fuploads%2Fgit-blob-42d1df6285507da8ed66e4173a669c4136a7dae4%2Fimage.png?alt=media)

     * **Private Key:** Paste the private key of the certificate (usually with the \*.key extension) in PEM format.

     ![](https://1985221522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7rE7M1L7GYcwQzNGd0aB%2Fuploads%2Fgit-blob-0ee9ebd130166ff8dc6b4ddd84277edd4f72d17a%2Fimage.png?alt=media)

     * **Certificate Chain:** Paste the certificate chain, including the server certificate and any intermediate certificates (if applicable), in PEM format.
       * **Important:** Ensure the chain is in the correct order:

         ```
         ---BEGIN CERTIFICATE--- [Your certificate] ---END CERTIFICATE---
         ---BEGIN CERTIFICATE--- [Intermediate#1 certificate] (optional) ---END CERTIFICATE---
         ---BEGIN CERTIFICATE--- [Intermediate#2 certificate] (optional) ---END CERTIFICATE---
         ```
   * **Passphrase:** If the private key has a passphrase, enter it here. Otherwise, leave this field blank.
   * **Expiration:** The expiration date of the certificate.
4. **Click "Upload":** Click the "Upload" button in the bottom right corner to complete the upload.

#### 2. Uploading CA Certificates

1. **Access the Certificate Manager:** Go to `https://hcm-3.console.vngcloud.vn/vserver/load-balancer/certificate`.
2. **Click "Upload Certificate":** A pop-up window will appear for you to enter certificate information.
3. **Fill in Certificate Details:**
   * **Friendly Name:** We recommend using the domain name as the friendly name.
   * **Certificate Type:** Select "CA."
   * **Certificate Input:**

     * **Certificate Content:** Paste your CA certificate (usually with the \*.crt extension) in PEM format.

     ![](https://1985221522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7rE7M1L7GYcwQzNGd0aB%2Fuploads%2Fgit-blob-743800ea4a7f208353756432c2062d2c767e4c18%2Fimage.png?alt=media)
   * **Expiration:** The expiration date of the certificate.
4. **Click "Upload":** Click the "Upload" button in the bottom right corner to complete the upload.