Register a certificate

Available in Classic and VPC

Register an external certificate

You can register and manage SSL/TLS certificates issued by an authorized certificate authority (CA).

Note

You can register only SSL/TLS certificates issued by public CAs; you can't register SSL/TLS certificates issued by private CAs.
You cannot register expired or revoked certificates. A certificate must be valid at the time of registration.

To register a certificate:

In the NAVER Cloud Platform console, navigate to Menu > All Services > Security > Certificate Manager.
Click Cloud Certificate > Certificate List.
Click [Register certificate].
Enter the certificate information in the Register certificate popup.
- For Certificate name, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
- Enter the PEM-encoded private key in Private Key.
  - You can't register an encrypted private key, so you need to decrypt it before registration. For more information on decryption, see Errors when registering a certificate.
  - Example 1: RSA private key
```
-----BEGIN RSA PRIVATE KEY-----
Base64–encoded private key
-----END RSA PRIVATE KEY-----
```
  - Example 2: Elliptic curve (EC) private key
```
-----BEGIN EC PRIVATE KEY-----
Base64–encoded private key
-----END EC PRIVATE KEY-----
```
- Enter the PEM-encoded certificate body in Certificate Body.
  - Example:
```
-----BEGIN CERTIFICATE-----
Base64–encoded certificate
-----END CERTIFICATE-----
```
- Enter the PEM-encoded certificate chain in Certificate Chain.
  - For instructions on registering Certificate Chain, see Register a certificate chain.
Click [Add].
- If an error occurs, see Errors when registering a certificate.
Review the certificate validity information in the popup and click [OK].

Errors when registering a certificate

You may see the following error messages when registering a certificate.
Check the cause and solution according to the error message.

The private key has been encrypted. Please decrypt it with a pass phrase.

Type Description

Cause An encrypted private key was registered.

Solution

Type	Description
Cause	An encrypted private key was registered.
Solution	Use openssl to decrypt the private key as shown below, then register it again. `openssl rsa -in [Encrypted Private Key File] -out [Decrypted Private Key File]` Example: `openssl rsa -in key.pem -out keyout.pem`

Use openssl to decrypt the private key as shown below, then register it again.

openssl rsa -in [Encrypted Private Key File] -out [Decrypted Private Key File]

Example: openssl rsa -in key.pem -out keyout.pem

An error occurred while validating the certificate. Only 1 certificate can be entered in the certificate body.

Type	Description
Cause	More than 2 certificate was entered in Certificate Body.
Solution	In Certificate Body, enter the certificate body of the single certificate you want to register. To register multiple certificates, repeat the certificate registration procedure for each certificate.

The certificate is not valid.

Type	Description
Cause	An invalid certificate path was entered in Certificate Body.
Solution	See Register a certificate chain and enter the correct certificate path for the certificate you want to register.

The number of domains that can be included in the certificate has been exceeded. (Up to 300)

Type	Description
Cause	The number of domains in the certificate Subject Alternative Name field exceeds 300.
Solution	Use a certificate that contains no more than 300 domains.

Register a certificate chain

To register the certificate chain required for SSL certificate registration, first check the certificate path and extract the PEM files.

To register a certificate chain:

1. Check the certificate path

To check the certificate path:

Open the certificate file you want to register in Certificate Manager.
- If the certificate file extension is .pem, change it to .crt and open the file.
Click the [Certification Path] tab and check the certificate chain.
- Check the entire certificate chain above the certificate you want to register.

2. Extract the certificate file

Export all certificates in the certification path to files, from the subordinate CA certificate immediately above your certificate to the root CA certificate at the top.

To export the subordinate CA and root CA certificates:

Open the certificate file you want to register in Certificate Manager.
- If the certificate file extension is .pem, change it to .crt and open the file.
Click the [Certification Path] tab.
Click the certificate you want to export to a PEM file, then click [View Certificate].
Check that Issued to matches the issuer of the certificate you want to register.
Click the [Details] tab.
Click [Copy to File].
Review the information in the Certificate Export Wizard popup and click [Next].
Select Base-64 encoded X.509 (.CER) and click [Next].
Click [Browse], select a save location, and enter a file name. Click [Save], then click [Next].
Review the settings and click [Finish].
Click [OK] in the completion popup.

3. Register a certificate chain

To register the exported certificate files in Certificate Chain:

Change the extension of each exported certificate file to .pem and open all the files.
Copy the contents from "-----BEGIN CERTIFICATE-----" to "-----END CERTIFICATE-----" and paste them into Certificate Chain in the Register certificate popup.
- Copy and paste the contents of all exported PEM files in order, from the subordinate CA certificate above your certificate to the root CA certificate.