Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Install a GoDaddy SSL certificate on Apache by placing the issued certificate, its matching private key, and GoDaddy’s intermediate bundle on the server, then referencing all three files in a TLS virtual host on port 443. Run the operating system’s Apache configuration test and require a Syntax OK result before restarting the service.

The exact configuration path and command names differ between common Ubuntu and CentOS installations. The procedure below covers both, explains where each file belongs, and shows what to check when Apache will not start or browsers report a chain error.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you need before changing Apache

An approved certificate request is only one part of an Apache TLS installation. Have these items ready before editing configuration:

  • The issued GoDaddy certificate downloaded from SSL Manager, normally supplied as a certificate file such as .crt.
  • The private key created on your server when you generated the CSR. This key must correspond to the issued certificate.
  • The GoDaddy intermediate certificate or bundle. GoDaddy’s certificate repository lists gd_bundle.crt for Apache 1.x and 2.x installations, along with PEM and DER formats.
  • Administrative access to the Apache server, including permission to read the configuration and copy certificate files.
  • The site’s existing DocumentRoot and ServerName values, so the HTTPS virtual host identifies the same site as the current HTTP configuration.

Keep the private key confidential. GoDaddy’s guidance is explicit: “You shouldn’t ever send your private key to someone else (including us!).” If the key is lost, downloading the certificate again will not recreate it; GoDaddy says rekeying may be necessary.

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.

Understand the three files Apache uses

Issued certificate

The issued certificate proves the domain identity covered by the request. Use the certificate file downloaded after GoDaddy approves the request. Do not substitute the CSR or an unrelated certificate.

Private key

The private key was generated with the CSR. Apache reads it through SSLCertificateKeyFile. The key must match the issued certificate; a key from another CSR will cause the TLS setup to fail even when the certificate itself is valid.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Intermediate certificate or bundle

Browsers and other clients may need the issuing intermediate certificate to build a trusted chain. Apache reads that file through SSLCertificateChainFile. Use the current intermediate file supplied by GoDaddy’s repository and make sure it corresponds to the issued certificate. For Apache 1.x and 2.x, GoDaddy specifically lists the Apache bundle file gd_bundle.crt. The repository also exposes PEM and DER forms; choose the format appropriate to the file you downloaded and the Apache setup you are using.

Put certificate files in a protected location

Apache must be able to read the certificate and key, but the private key should not be broadly readable. Store the files in a directory readable only by root where practical, and preserve the paths exactly when you enter them in the virtual host. A path typo can look like a certificate problem even when the certificate is correct.

Keep a note of the full path for each file:

  • Issued certificate: the path used by SSLCertificateFile.
  • Private key: the path used by SSLCertificateKeyFile.
  • Intermediate or bundle: the path used by SSLCertificateChainFile.

Do not email or upload the private key while troubleshooting. If you need outside assistance, provide the Apache error text and public certificate details, not the secret key.

Find Apache’s configuration file

GoDaddy documents different default locations for common distributions. Customized installations can place the active virtual host elsewhere, so verify the actual configuration tree before editing.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Platform Common configuration file Configuration test Restart command Typical package layout
Ubuntu /etc/apache2/apache2.conf apache2ctl configtest apache2ctl restart /etc/apache2/
CentOS /etc/httpd/httpd.conf apachectl configtest apachectl restart /etc/httpd/

These are GoDaddy’s documented defaults, not a guarantee for every server. If the installation was customized, search the Apache configuration tree for SSLCertificateFile. An existing occurrence usually reveals which virtual-host file is active and how the server names its certificate files.

Create the HTTPS virtual host

Add or update a TLS virtual host that listens on port 443. Preserve the site’s existing document root and server name values. GoDaddy’s example uses this structure:

<VirtualHost YOUR_SERVER_IP:443>
    DocumentRoot /var/www/example
    ServerName example.com www.example.com
    SSLEngine on
    SSLCertificateFile /path/to/issued-certificate.crt
    SSLCertificateKeyFile /path/to/privatekey.key
    SSLCertificateChainFile /path/to/intermediate-or-bundle.crt
</VirtualHost>

Replace every placeholder

YOUR_SERVER_IP must identify the server interface used by the site, or you can use the address form already present in the server’s Apache configuration. Replace /var/www/example with the existing site’s document root. Replace example.com www.example.com with the names covered by your certificate and already used by the site. Finally, replace all three file paths with the actual absolute paths on your server.

The important details are the added :443 listener, SSLEngine on, and the three certificate directives. Leaving the virtual host on port 80 will not create the HTTPS listener. Changing the document root or server name unnecessarily can make HTTPS serve the wrong content, so copy those values from the original site block.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ubuntu installation procedure

1. Open the active configuration

On a standard Ubuntu installation, GoDaddy identifies /etc/apache2/apache2.conf. Open that file or the included virtual-host file where your existing SSLCertificateFile or site definition is stored. If a search shows a different active file, edit that file instead.

2. Add the port-443 virtual host

Create the TLS block using the real document root, server names, certificate path, key path, and intermediate-bundle path. Keep the directives inside the <VirtualHost ...:443> block. Check that the key path points to the CSR-generated key, not to the certificate or bundle.

Rank #3
Sale
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black | LED mouse pad with 14 lighting modes, covers keyboard & mouse, anti-slip rubber base, waterproof surface, USB powered
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.

3. Test the syntax

Run:

apache2ctl configtest

Continue only when the command returns Syntax OK. GoDaddy warns that a syntax error can prevent Apache from starting again. Correct every reported error before attempting a restart.

4. Restart Apache

After a successful test, restart with:

apache2ctl restart

If the restart reports an error, stop and return to the configuration and file paths rather than repeatedly restarting an invalid configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

CentOS installation procedure

1. Open the active configuration

On a standard CentOS installation, GoDaddy identifies /etc/httpd/httpd.conf. Customized systems may include virtual-host files from another directory. Search the Apache configuration tree for SSLCertificateFile if the documented file does not contain your site block.

2. Add the port-443 virtual host

Use the same virtual-host structure shown above. Retain the existing DocumentRoot and ServerName, turn on SSL with SSLEngine on, and enter the absolute paths for the issued certificate, matching private key, and GoDaddy intermediate or bundle file.

3. Test the syntax

Run the CentOS command:

apachectl configtest

The required result is Syntax OK. Do not restart while the test reports an error.

4. Restart Apache

After the configuration test succeeds, restart with:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
apachectl restart

Use the command for the platform’s Apache layout rather than mixing Ubuntu and CentOS command names.

Validate the installation before calling it complete

A successful syntax test confirms that Apache can parse the configuration; it does not replace checking the file references and site identity. Work through these checks in order:

  1. Confirm the TLS block listens on port 443.
  2. Confirm SSLEngine on appears inside that block.
  3. Confirm SSLCertificateFile points to the newly issued certificate.
  4. Confirm SSLCertificateKeyFile points to the private key generated with the CSR.
  5. Confirm SSLCertificateChainFile points to the matching GoDaddy intermediate certificate or bundle.
  6. Confirm the TLS block retains the intended DocumentRoot and ServerName.
  7. Run the platform-specific configtest again after any correction and require Syntax OK.
  8. Restart Apache only after that result.

GoDaddy’s Ubuntu instructions phrase the checkpoint plainly: “Confirm that the test returns a Syntax OK response.” Treat that as a gate, not as an optional diagnostic.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Renew a GoDaddy certificate on Apache

A renewal uses the same relationship among the certificate, private key, and chain. GoDaddy documents copying the renewed certificate, intermediate bundle, and CSR-generated key as part of the renewal workflow, updating httpd.conf, and restarting Apache.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When the existing key is still available

Keep the existing key path if the renewed certificate was issued for the same CSR and the key is present. Copy the renewed certificate and current intermediate bundle to their protected locations, then make sure the directives reference those files. Run the configuration test before restarting.

When the key is missing

Do not point Apache at a guessed or unrelated key. Search the server for the key file and inspect the existing SSLCertificateKeyFile line in apache2.conf or httpd.conf to see the expected path. If the original key cannot be recovered, GoDaddy says rekeying may be necessary. A rekey creates a new CSR and therefore a new matching private key; keep that key protected when it is generated.

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.

Troubleshoot the most common failures

Apache reports a syntax error

Do not restart. Re-read the error, check the virtual-host brackets and directive spelling, and verify that each path is complete. Run the correct test command again until it returns Syntax OK. A restart with an invalid file can leave Apache unable to start, which is why the test belongs before every restart.

The private key cannot be found

Inspect the SSLCertificateKeyFile line in the active Apache configuration and search for the referenced .key file. The certificate download does not contain the private key. If no backup or server copy exists, follow GoDaddy’s rekeying process rather than sending the key to GoDaddy or anyone else.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Clients report an incomplete or untrusted chain

Check the intermediate directive first. Use the current file supplied by GoDaddy’s repository, selecting the Apache bundle gd_bundle.crt or the appropriate PEM/DER form for your installation. Confirm that the intermediate matches the issued certificate and that the path in SSLCertificateChainFile is the file you actually copied.

HTTPS serves the wrong site

Compare the TLS virtual host with the original HTTP site block. The HTTPS block should use port 443 while preserving the intended DocumentRoot and ServerName. A copied block with a different root or hostname can send requests to another site even though the certificate loads successfully.

The configuration file you edited has no effect

Customized Apache installations may not use the documented Ubuntu or CentOS file. Search the configuration tree for SSLCertificateFile and edit the file included by the active Apache configuration. After finding it, run the platform-specific test command so Apache parses the same configuration tree you intend to restart.

Certificate-file checklist

Use this checklist immediately before the final restart:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • The certificate was downloaded from GoDaddy SSL Manager after approval.
  • The private key was created with the CSR and has not been disclosed.
  • The intermediate certificate or bundle is the current GoDaddy file, such as gd_bundle.crt for Apache 1.x and 2.x.
  • All three files are stored at the exact paths written in the directives.
  • The TLS virtual host listens on :443.
  • DocumentRoot and ServerName match the intended site.
  • The correct command for the operating system returns Syntax OK.

Limits of the documented defaults

The paths and commands in this guide are GoDaddy’s documented defaults for common Ubuntu and CentOS layouts. They are not universal Apache paths. GoDaddy notes that readers whose server or operating-system version is not listed should consult their server documentation for installation details. The same qualification applies to distributions with custom package layouts or administrators who have moved virtual-host files.

The durable parts of the procedure are independent of that layout: use the issued certificate, its matching private key, and the correct intermediate chain; place them in a TLS virtual host on port 443; preserve the site identity; run the appropriate configuration test; and restart only after Syntax OK.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.