DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk9 min

How to Install a GoDaddy SSL Certificate on Apache

Configure a GoDaddy SSL certificate on Apache by installing the issued certificate, matching private key, and intermediate bundle in a port-443 virtual host, then run the correct Ubuntu or CentOS configtest before restarting.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Install a GoDaddy certificate on Apache by placing the issued certificate, its matching private key, and GoDaddy’s intermediate bundle on the server, then referencing all three in the site’s TLS virtual host on port 443. Test the Apache configuration and require a Syntax OK result before restarting. The private key must remain secret; if it is missing, the certificate cannot be installed as issued and you may need to rekey it.

What you need before changing Apache

An approved certificate request is only one part of an Apache installation. Have these files and access ready before editing the server:

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • The issued certificate. Download the certificate from GoDaddy SSL Manager after the request is approved. The file is commonly supplied with a .crt extension.
  • The matching private key. This is the key created on your server when you generated the CSR. It is often a .key file. The key must correspond to the CSR and certificate; a different key will not work.
  • The intermediate certificate or bundle. GoDaddy supplies an Apache bundle named gd_bundle.crt. Its repository also provides certificate files in PEM and DER formats. Use the current bundle or intermediate file supplied for your certificate.
  • Administrative access to the Apache host. You need permission to read the configuration, copy certificate files, run the configuration test, and restart Apache.

Store the certificate and bundle where Apache can read them, but keep the private key in a directory readable only by root, or by the account that must run Apache, where practical. Never email or upload the private key to GoDaddy or another party. If the key created for the CSR is gone, search the server for the expected .key file before taking any other action. GoDaddy’s guidance says that rekeying may be necessary when the original private key is unavailable.

Find the Apache configuration on your server

The exact file layout depends on the operating system and on whether the administrator customized Apache. GoDaddy documents these common locations:

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
System Common configuration file Configuration test Restart command Typical package directory
Ubuntu /etc/apache2/apache2.conf apache2ctl configtest apache2ctl restart /etc/apache2/
CentOS /etc/httpd/httpd.conf apachectl configtest apachectl restart /etc/httpd/

These are documented defaults, not guarantees. A distribution may include additional files for virtual hosts, and a custom installation may use a different configuration tree. Search the Apache configuration files for an existing SSLCertificateFile directive. That search identifies the TLS virtual host or included file that already defines certificate settings and prevents you from editing an unrelated server block.

Before editing, note the existing site’s DocumentRoot and ServerName. The HTTPS virtual host should normally identify the same site and content as the existing HTTP configuration. If the site also uses an alias such as www.example.com, preserve that name in the TLS block.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Put the certificate files in a protected location

Copy the issued certificate, private key, and intermediate bundle to stable paths on the server. The names do not have to match the example names; the paths in Apache must exactly match the files you actually installed.

A simple arrangement might look like this:

/etc/ssl/example.com/example.com.crt
/etc/ssl/example.com/example.com.key
/etc/ssl/example.com/gd_bundle.crt

The example directory is illustrative. Use a directory appropriate for your distribution and existing security policy. Keep the key more restricted than the public certificate and bundle. Do not paste private-key contents into a support ticket, shell history, or a public repository. The certificate and intermediate files are intended to be presented by the server; the private key is not.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

If you received more than one certificate file, distinguish the issued server certificate from the intermediate chain. The SSLCertificateFile directive points to the issued certificate, while SSLCertificateChainFile points to the intermediate or Apache bundle. Do not substitute an unrelated certificate from another hostname or renewal.

Create the Apache TLS virtual host

Apache serves HTTPS through a virtual host listening on port 443. Edit the existing SSL virtual host if one is already present, or add a TLS block alongside the site’s other virtual-host definitions. Preserve the site’s real IP address, document root, and names rather than copying the placeholders below literally.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
<VirtualHost YOUR_SERVER_IP:443>
    DocumentRoot /var/www/example
    ServerName example.com www.example.com
    SSLEngine on
    SSLCertificateFile /etc/ssl/example.com/example.com.crt
    SSLCertificateKeyFile /etc/ssl/example.com/example.com.key
    SSLCertificateChainFile /etc/ssl/example.com/gd_bundle.crt
</VirtualHost>

What each line does

  • <VirtualHost YOUR_SERVER_IP:443> assigns the block to HTTPS on port 443. Replace YOUR_SERVER_IP with the address used by the site, or retain the address form already used in your Apache configuration. The important requirement is the 443 port.
  • DocumentRoot keeps the HTTPS site pointed at the same content directory as the original site. Replace the example path with the existing document root.
  • ServerName identifies the primary hostname. Include the site’s established names, such as the www name, in the form already used by the configuration.
  • SSLEngine on enables TLS handling for this virtual host.
  • SSLCertificateFile points to the certificate GoDaddy issued for the request.
  • SSLCertificateKeyFile points to the private key generated with the CSR. It must be the matching key, not a newly generated or unrelated file.
  • SSLCertificateChainFile points to the intermediate certificate or GoDaddy’s gd_bundle.crt, allowing clients to build a chain of trust.

Use absolute paths. Relative paths, misspelled filenames, and paths that differ only by capitalization can cause a configuration error or a certificate-loading failure. If the server already has a working SSL virtual host, change only the certificate, key, and chain paths required for this certificate rather than creating a second competing block.

Validate the configuration before restarting

Always run Apache’s configuration test after saving the file and before restarting the service. A restart with a syntax error can leave Apache unable to start again.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Ubuntu

apache2ctl configtest

CentOS

apachectl configtest

The successful result must include Syntax OK. Treat any other output as a stop condition. Correct the reported file, line, directive, or path and run the same command again until the test returns Syntax OK. Do not use a restart as a way to discover configuration errors.

Common causes of a failed test include an unclosed <VirtualHost> block, a misspelled directive, a certificate path that does not exist, a key path that points to the wrong file, or a chain directive copied with a filename that is not present. Check the exact path on disk and compare it character by character with the Apache directive.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Restart Apache after a successful test

Once the platform-specific test reports Syntax OK, restart Apache so it loads the certificate settings.

Ubuntu

apache2ctl restart

CentOS

apachectl restart

If the restart reports an error, return to the configuration test and correct the underlying problem. Do not remove the private-key directive or bypass the chain merely to make the service start; those changes can leave the site without a valid certificate presentation.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

After the restart, connect to the HTTPS hostname and check that the browser or other TLS client receives the expected certificate for that name and a complete trust chain. If the result is an old certificate, Apache may be loading another virtual host or another included configuration file; revisit the SSLCertificateFile search and confirm that the edited TLS block is the one serving port 443.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Renewing an existing GoDaddy certificate

A renewal uses the same Apache pattern, but it is easy to leave the previous certificate in place. After GoDaddy issues the renewed certificate:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Download the renewed issued certificate from SSL Manager.
  2. Obtain the intermediate certificate or current gd_bundle.crt for the renewed installation.
  3. Locate the private key generated for the CSR used by the renewal. If the renewal used a new CSR, its new matching key is required; the key from an older CSR is not interchangeable.
  4. Copy the renewed certificate, bundle, and matching key to the protected paths used by Apache, or update the directives to their new paths.
  5. Check that SSLCertificateFile, SSLCertificateKeyFile, and SSLCertificateChainFile all refer to the intended renewal files.
  6. Run apache2ctl configtest on Ubuntu or apachectl configtest on CentOS and require Syntax OK.
  7. Restart with the matching platform command and then verify that the server presents the renewed certificate.

Keeping the same filenames and paths can simplify renewals: replacing the certificate and bundle in a protected directory means the virtual-host directives do not need to change. If you use that approach, still run the configuration test and restart after replacing files.

Troubleshoot the problems that stop installation

Apache cannot find the private key

Read the SSLCertificateKeyFile line in the active Apache configuration to see the expected location. Search for the CSR-generated .key file on the server and compare it with that path. If the key was deleted, moved, or never saved, do not send a replacement copy to GoDaddy or anyone else. GoDaddy states that rekeying may be necessary when the original private key is unavailable. A rekey creates a new CSR and matching private key for a newly issued certificate.

The certificate and key do not match

A certificate issued from one CSR cannot be paired with an unrelated private key. Recheck which key was used when the CSR was generated, especially during renewal. If several .key files exist, use the one associated with the exact request and hostname. Reissuing or rekeying is safer than guessing.

Clients report an incomplete chain or trust warning

Confirm that SSLCertificateChainFile points to the intermediate file supplied for the certificate, not to an old bundle or a server certificate copied a second time. GoDaddy’s certificate repository provides PEM and DER forms and an Apache bundle; choose the current file intended for Apache. Replace an outdated intermediate file, rerun the configuration test, and restart.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The wrong website or certificate appears

Check that the TLS block listens on :443, uses the expected ServerName, and preserves the site’s DocumentRoot. A block attached to another address, port, or hostname can make Apache answer with a different virtual host. Search the whole Apache configuration tree for SSLCertificateFile and inspect included files for duplicate or older definitions.

The configuration test fails

Do not restart until the correct command returns Syntax OK. Read the error as a pointer to the file and line Apache could not parse. Check for balanced virtual-host tags, valid directive spelling, readable files, and exact absolute paths. Fix one error at a time, rerunning the test after each correction.

Apache will not start after an edit

Run the platform-specific configuration test again rather than repeatedly restarting. If the test fails, revert the last change or correct the named directive, then retest. If the test passes but the service still will not start, compare the active configuration with the last known-good version and verify that the certificate, key, and bundle files are present at the paths Apache reads.

A practical installation checklist

  • Certificate request approved and issued certificate downloaded from SSL Manager.
  • CSR-generated private key located and kept secret.
  • Current intermediate certificate or gd_bundle.crt downloaded.
  • Files copied to protected, readable paths.
  • Apache configuration tree searched for the active SSLCertificateFile directive.
  • TLS virtual host configured on port 443.
  • DocumentRoot and ServerName preserved from the site’s existing identity.
  • Certificate, key, and chain directives point to the intended files.
  • Ubuntu: apache2ctl configtest returns Syntax OK; CentOS: apachectl configtest returns Syntax OK.
  • Apache restarted with the matching command only after the successful test.
  • HTTPS connection checked for the renewed or newly installed certificate and a complete chain.

When manual installation is not the right option

GoDaddy’s manual-installation guidance is intended for administrators who can manage Apache and the server’s certificate files. If your hosting provider controls Apache, does not provide configuration access, or uses a different web-server layout, use that provider’s certificate-installation workflow instead. GoDaddy notes that instructions can differ when a server or operating-system version is not listed in its standard documentation. The essential requirements remain the same: a certificate, its matching private key, and the correct intermediate chain must be installed in the web server that terminates HTTPS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.