Bring your own certificate

❗ Important: Domain and Certificate Management is being rolled out to select customers and is not enabled for all marketplaces. This topic applies only when the feature is enabled for your marketplace. If Domain and Certificate Management does not appear under SETTINGS at Manage > Marketplace > Settings, contact your AppDirect technical representative to request it.

You can use your own SSL certificate from a certificate authority instead of an AppDirect-provided certificate. You generate a certificate signing request (CSR), submit it to your certificate authority, and upload the signed certificate.

Use your own certificate only if you must use a specific certificate authority for regulatory or contractual reasons. Your certificate requires yearly renewal. You are responsible for obtaining and uploading renewed certificates.

Before you start

Your custom domain must be activated before you can upload a certificate. See Configure a custom domain if you have not completed domain setup.

To start the CSR flow, open the SSL Certificate page and click Start CSR Flow on the Use Your Own Certificate card. See Choose an SSL certificate for your custom domain for how to open the page.

Step 1: Generate a CSR

📝 Note: This documentation page may refer to Manage > Marketplace in navigation steps. If the Manage option is not available in your navigation, click the grid icon on the top-left corner of your header and click Marketplace.

1. On the Certificate Signing Request page, enter values for the following fields:
   • Organization
   • Country (2-letter ISO country code)
   • State/Province
   • Locality
2. Click Generate CSR.

A new key pair is created when you generate the CSR.

Step 2: Download the CSR

1. On the Download CSR step, download the CSR file shown on the page.
2. Submit the CSR to your certificate authority to obtain a signed certificate.
3. When you have the signed certificate, return to the Certificate Signing Request page. Click I Have My Certificate — Continue.

You can also click Download CSR File to save the CSR to your computer.

While a CSR is pending, a CSR Pending message appears at the top of the page. You can re-generate a new CSR from this step if needed.

Step 3: Upload your certificate

1. On the Upload Certificate step, paste your PEM-encoded certificate in PEM Certificate, or click Upload File to upload a .pem or .crt file.
2. Include the full certificate chain if your certificate authority provides one.
3. Click Upload Certificate.

When the upload completes, the page shows Certificate Deployed. Your certificate may take a few minutes to fully propagate. Click Return to Dashboard to go back to Certificate Management.

Cancel the CSR flow

You can cancel the CSR flow before you upload a signed certificate. Click Cancel CSR Flow at the top of the Certificate Signing Request page.

In the Cancel CSR Flow dialog, confirm that you want to cancel. This deletes the generated CSR and private key. If you have not deployed a custom certificate yet, your marketplace reverts to an AppDirect-provided certificate.

Next steps

• Renew a marketplace certificate
• Choose an SSL certificate for your custom domain
• Domain and Certificate Management