How to Install an SSL Certificate in Plesk

Plesk makes SSL certificate management straightforward with its intuitive interface. This guide walks you through the complete process of installing an SSL certificate in Plesk, including generating a CSR, installing the certificate, and configuring HTTPS redirection.

Prerequisites

Before installing your SSL certificate, ensure you have:

Access to Plesk control panel for your hosting account
An SSL certificate (.crt or .pem file) from your certificate authority
The private key (.key file) generated with your CSR
The CA certificate (intermediate/chain certificate) from your CA
Domain pointed to your server via DNS

Tip: Domain India Plesk hosting plans include SSL management tools. You can manage certificates directly from your Plesk dashboard.

Step 1: Generate a CSR in Plesk

If you already have your SSL certificate, skip to Step 2.

Log in to your Plesk control panel
Go to Websites & Domains
Click on SSL/TLS Certificates for your domain
Click Add SSL/TLS Certificate
Enter a name for the certificate (for your reference, e.g., "example-com-2026")
Fill in the certificate details:
- Bits: 2048 or higher
- Country, State, Location: Your geographic details
- Organization, Department: Your business information
- Domain Name: Your domain (e.g., example.com)
- Email: Your contact email address
Click Request
Plesk generates your CSR and Private Key
Copy the CSR and submit it to your certificate authority

Step 2: Install the SSL Certificate

Once you receive your SSL certificate from the CA:

Method 1: Upload Certificate Files

Go to Websites & Domains > SSL/TLS Certificates
Click on the certificate name you created in Step 1
Scroll to the Upload the certificate as text section
Paste your Certificate (.crt content) in the Certificate field
Paste the CA Certificate (intermediate chain) in the CA Certificate field
The Private Key should already be present from CSR generation
Click Upload Certificate

Method 2: Upload Certificate Files Directly

Go to Websites & Domains > SSL/TLS Certificates
Click on the certificate name
Use the Upload certificate files section
Browse and select your .crt file, .key file, and .ca-bundle file
Click Send Files

Step 3: Assign the Certificate to Your Domain

After uploading, you must assign the certificate to your domain:

Go to Websites & Domains
Click Hosting & DNS (or Hosting Settings) for your domain
In the Security section, check SSL/TLS support
From the Certificate dropdown, select the certificate you just installed
Click OK or Apply

Your domain will now serve content over HTTPS.

Step 4: Enable HTTPS Redirect

To force all traffic through HTTPS:

Method 1: Plesk Settings

Go to Websites & Domains
Click on your domain
Find the SSL/TLS or Hosting Settings section
Enable Permanent SEO-safe 301 redirect from HTTP to HTTPS
If available, also enable HSTS (HTTP Strict Transport Security) for enhanced security
Click OK

Method 2: .htaccess (Apache/Nginx)

For more control, add to your .htaccess:

code

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Step 5: Verify the Installation

Visit https://yourdomain.com in your browser
Click the padlock icon to verify certificate details
Check that the certificate chain is complete
Test with an online SSL verification tool
Verify both www and non-www versions work with HTTPS

Using Let's Encrypt in Plesk

Plesk includes a Let's Encrypt extension for free SSL certificates:

Go to Websites & Domains
Click SSL/TLS Certificates
Click Install next to Let's Encrypt (or Get it free button)
Select the components to secure:
- Secure the domain
- Include www subdomain
- Secure webmail
- Wildcard domain (if available)
Click Install (or Get it free)

Let's Encrypt certificates auto-renew every 90 days in Plesk.

Troubleshooting Common Issues

Ensure the certificate was successfully uploaded (no error messages)
Verify both the certificate and private key are present
Try re-uploading the certificate files
Check that the certificate format is correct (PEM/X.509)

Certificate Mismatch Error

The private key must match the CSR used to obtain the certificate
Generate a new CSR in Plesk, reissue the certificate, and reinstall

Chain Certificate Error

Download the correct CA bundle from your certificate provider
Paste it in the CA Certificate field
Some providers offer a "full chain" file that includes all intermediates

HTTPS Redirect Loop

Check for conflicting redirect rules in .htaccess
If behind a proxy (e.g., Cloudflare), configure SSL mode to "Full" or "Full (Strict)"
Verify Plesk's redirect settings are not duplicating .htaccess rules

Mixed Content After SSL Installation

Update your CMS settings to use https:// URLs
Search and replace http:// references in your database
Check theme files and plugins for hardcoded HTTP URLs
Use browser developer tools (F12 > Console) to identify mixed content sources

Managing Multiple SSL Certificates

In Plesk, each domain can have its own SSL certificate:

Navigate to the specific domain under Websites & Domains
Access SSL/TLS Certificates for that domain
Each subscription and domain maintains separate certificate storage
Wildcard certificates can be shared across subdomains of the same domain

SSL Certificate Renewal

When your certificate approaches expiration:

Obtain the renewed certificate from your CA (you may reuse the existing CSR)
Go to SSL/TLS Certificates in Plesk
Upload the new certificate following Step 2
Reassign it to your domain if it is stored as a new certificate entry
Verify the new expiration date

Tip: Let's Encrypt certificates renew automatically in Plesk. For paid certificates, set a reminder 30 days before expiration.

Managing SSL Certificates in Plesk
Understanding SSL Certificate Types
Troubleshooting SSL Certificate Errors

Need help with SSL installation in Plesk? Contact our support team at [email protected] or open a ticket at https://domainindia.com/support.