---
title: "Register a certificate"
slug: "certificatemanager-addcertificate"
tags: ["Security"]
updated: 2026-10-08T06:57:24Z
published: 2026-10-08T06:57:24Z
canonical: "guide.ncloud-docs.com/certificatemanager-addcertificate"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Register a certificate

Available in Classic and VPC

## Register an external certificate

You can register and manage SSL/TLS certificates issued by an authorized certificate authority (CA).

              Note

              

- You can register only SSL/TLS certificates issued by public CAs; you can't register SSL/TLS certificates issued by private CAs.
- You cannot register expired or revoked certificates. A certificate must be valid at the time of registration.

To register a certificate:

1. In the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Certificate Manager**.
2. Click **Cloud Certificate** > **Certificate List**.
3. Click **[Register certificate]**.
4. Enter the certificate information in the Register certificate popup.  

![certificatemanager-use-list_register4_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_register4_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
  - For **Certificate name**, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
  - Enter the PEM-encoded private key in **Private Key**.
    - You can't register an encrypted private key, so you need to decrypt it before registration. For more information on decryption, see [Errors when registering a certificate](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%93%B1%EB%A1%9D%EC%8B%9C%EC%98%A4%EB%A5%98).
    - Example 1: RSA private key

```
-----BEGIN RSA PRIVATE KEY-----
Base64–encoded private key
-----END RSA PRIVATE KEY-----
```
    - Example 2: Elliptic curve (EC) private key

```
-----BEGIN EC PRIVATE KEY-----
Base64–encoded private key
-----END EC PRIVATE KEY-----
```
  - Enter the PEM-encoded certificate body in **Certificate Body**.
    - Example:

```
-----BEGIN CERTIFICATE-----
Base64–encoded certificate
-----END CERTIFICATE-----
```
  - Enter the PEM-encoded certificate chain in **Certificate Chain**.
    - For instructions on registering **Certificate Chain**, see [Register a certificate chain](/docs/en/certificatemanager-addcertificate#CertificateChain%EB%93%B1%EB%A1%9D).
5. Click **[Add]**.
  - If an error occurs, see [Errors when registering a certificate](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%93%B1%EB%A1%9D%EC%8B%9C%EC%98%A4%EB%A5%98).
6. Review the certificate validity information in the popup and click **[OK]**.

### Errors when registering a certificate

You may see the following error messages when registering a certificate. Check the cause and solution according to the error message.

- [The private key has been encrypted. Please decrypt it with a pass phrase.](/docs/en/certificatemanager-addcertificate#privatekey%EA%B0%80%EC%95%94%ED%98%B8%ED%99%94%EB%90%98%EC%96%B4%EC%9E%88%EC%8A%B5%EB%8B%88%EB%8B%A4passphrase%EB%A1%9C%EB%B3%B5%ED%98%B8%ED%99%94%ED%95%B4%EC%A3%BC%EC%84%B8%EC%9A%94)
- [An error occurred while validating the certificate. Only 1 certificate can be entered in the certificate body.](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EA%B2%80%EC%A6%9D%EC%A4%91%EC%98%A4%EB%A5%98%EA%B0%80%EB%B0%9C%EC%83%9D%ED%96%88%EC%8A%B5%EB%8B%88%EB%8B%A4%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%B3%B8%EB%AC%B8%EC%97%90%EB%8A%94%ED%95%98%EB%82%98%EC%9D%98%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%A7%8C%EC%9E%85%EB%A0%A5%ED%95%A0%EC%88%98%EC%9E%88%EC%8A%B5%EB%8B%88%EB%8B%A4)
- [The certificate is not valid.](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EA%B0%80%EC%9C%A0%ED%9A%A8%ED%95%98%EC%A7%80%EC%95%8A%EC%8A%B5%EB%8B%88%EB%8B%A4)
- [Failed to validate the certificate encryption algorithm.](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EC%95%94%ED%98%B8%ED%99%94%EC%95%8C%EA%B3%A0%EB%A6%AC%EC%A6%98%EA%B2%80%EC%A6%9D%EC%8B%A4%ED%8C%A8%EC%9E%85%EB%8B%88%EB%8B%A4)
- [The number of domains that can be included in the certificate has been exceeded. (Up to 300)](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EC%97%90%ED%8F%AC%ED%95%A8%EB%90%A0%EC%88%98%EC%9E%88%EB%8A%94%EB%8F%84%EB%A9%94%EC%9D%B8%EA%B0%9C%EC%88%98%EC%B4%88%EA%B3%BC%EC%9E%85%EB%8B%88%EB%8B%A4)

#### The private key has been encrypted. Please decrypt it with a pass phrase.

| Type | Description |
| --- | --- |
| Cause | An encrypted private key was registered. |
| Solution | Use openssl to decrypt the private key as shown below, then register it again. ``` openssl rsa -in [Encrypted Private Key File] -out [Decrypted Private Key File] ``` Example: `openssl rsa -in key.pem -out keyout.pem` |

#### An error occurred while validating the certificate. Only 1 certificate can be entered in the certificate body.

| Type | Description |
| --- | --- |
| Cause | More than 2 certificate was entered in **Certificate Body**. |
| Solution | In Certificate Body, enter the certificate body of the single certificate you want to register.To register multiple certificates, repeat the [certificate registration](/docs/en/certificatemanager-addcertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%93%B1%EB%A1%9D) procedure for each certificate. |

#### The certificate is not valid.

| Type | Description |
| --- | --- |
| Cause | An invalid certificate path was entered in **Certificate Body**. |
| Solution | See [Register a certificate chain](/docs/en/certificatemanager-addcertificate#CertificateChain%EB%93%B1%EB%A1%9D) and enter the correct certificate path for the certificate you want to register. |

#### The number of domains that can be included in the certificate has been exceeded. (Up to 300)

| Type | Description |
| --- | --- |
| Cause | The number of domains in the certificate Subject Alternative Name field exceeds 300. |
| Solution | Use a certificate that contains no more than 300 domains. |

### Register a certificate chain

To register the certificate chain required for SSL certificate registration, first check the certificate path and extract the PEM files.

To register a certificate chain:

- [1. Check the certificate path](/docs/en/certificatemanager-addcertificate#1%EC%9D%B8%EC%A6%9D%EC%84%9C%EA%B2%BD%EB%A1%9C%ED%99%95%EC%9D%B8)
- [2. Extract the certificate file](/docs/en/certificatemanager-addcertificate#2%EC%9D%B8%EC%A6%9D%EC%84%9C%ED%8C%8C%EC%9D%BC%EC%B6%94%EC%B6%9C)
- [3. Register a certificate chain](/docs/en/certificatemanager-addcertificate#3CertificateChain%EB%93%B1%EB%A1%9D)

#### 1. Check the certificate path

To check the certificate path:

1. Open the certificate file you want to register in Certificate Manager.
  - If the certificate file extension is `.pem`, change it to `.crt` and open the file.  

![certificatemanager-use-list_confirm_chainroot1_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_confirm_chainroot1_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
2. Click the **[Certification Path]** tab and check the certificate chain.
  - Check the entire certificate chain above the certificate you want to register.  

![certificatemanager-use-list_confirm_chainroot2_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_confirm_chainroot2_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)

#### 2. Extract the certificate file

Export all certificates in the certification path to files, from the subordinate CA certificate immediately above your certificate to the root CA certificate at the top.

To export the subordinate CA and root CA certificates:

1. Open the certificate file you want to register in Certificate Manager.
  - If the certificate file extension is `.pem`, change it to `.crt` and open the file.
2. Click the **[Certification Path]** tab.  

![certificatemanager-use-list_extract_chain5_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain2_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
3. Click the certificate you want to export to a PEM file, then click **[View Certificate]**.  

![certificatemanager-use-list_extract_chain5_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain3_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
4. Check that **Issued to** matches the issuer of the certificate you want to register.  

![certificatemanager-use-list_extract_chain4_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain4_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
5. Click the **[Details]** tab.  

![certificatemanager-use-list_extract_chain5_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain5_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
6. Click **[Copy to File]**.  

![certificatemanager-use-list_extract_chain5_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain6_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
7. Review the information in the Certificate Export Wizard popup and click **[Next]**.  

![certificatemanager-use-list_extract_chain7_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain7_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
8. Select **Base-64 encoded X.509 (.CER)** and click **[Next]**.  

![certificatemanager-use-list_extract_chain8_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain8_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
9. Click **[Browse]**, select a save location, and enter a file name. Click **[Save]**, then click **[Next]**.  

![certificatemanager-use-list_extract_chain9_ko.png](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain9_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
10. Review the settings and click **[Finish]**.  

![certificatemanager-use-list_extract_chain10_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain10_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
11. Click **[OK]** in the completion popup.  

![certificatemanager-use-list_extract_chain11_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain11_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)

#### 3. Register a certificate chain

To register the exported certificate files in Certificate Chain:

1. Change the extension of each exported certificate file to `.pem` and open all the files.  

![certificatemanager-use-list_extract_chain5_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain_register1_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)
2. Copy the contents from "-----BEGIN CERTIFICATE-----" to "-----END CERTIFICATE-----" and paste them into **Certificate Chain** in the Register certificate popup.
  - Copy and paste the contents of all exported PEM files in order, from the subordinate CA certificate above your certificate to the root CA certificate.  

![certificatemanager-use-list_extract_chain_register2_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/certificatemanager-use-list_extract_chain_register2_en.png?sv=2026-02-06&spr=https&st=2026-10-27T17%3A20%3A46Z&se=2026-10-27T18%3A20%3A46Z&sr=c&sp=r&sig=z3BmZpT3rb12hozZhD0dS%2BtOx4fcFLH8JZKNeP1Nq6A%3D)