How to move SSL certificate to a new hosting?

Klaus Warzecha

Member
Registered
Joined
Nov 10, 2016
Messages
42
Points
8
My sites are using SSL service of Lets encrypt on my hosting but I will move my hosting to a new host next week. The SSL certificate is assigned on an IP address on my hosting, when moving to a new hosting, how can I keep current SSL and do I need to change IP (used on my old hosting) to use for SSL on new hosting?
 

ron

New member
Registered
Joined
Mar 22, 2017
Messages
7
Points
0
Many SSL Certificate Authorities give unlimited server licenses that mean you can install your certificate on number of servers. Now in the case of LE, I actually don't know they are giving unlimited server licenses or not. If they do, they you don't require to request new certificate or reissue it as you can use existing certificate on your new server. Now if they don't, you have to make fresh request for new SSL Certificate.
 

AlbaHost

Well-known member
Moderator
Hosting Provider
Joined
Jan 18, 2017
Messages
774
Points
43
My sites are using SSL service of Lets encrypt on my hosting but I will move my hosting to a new host next week. The SSL certificate is assigned on an IP address on my hosting, when moving to a new hosting, how can I keep current SSL and do I need to change IP (used on my old hosting) to use for SSL on new hosting?
Lets encrypt ssl its free, your new hosting provider can issue you a new one so there is very easy to do it.
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
My sites are using SSL service of Lets encrypt on my hosting but I will move my hosting to a new host next week. The SSL certificate is assigned on an IP address on my hosting, when moving to a new hosting, how can I keep current SSL and do I need to change IP (used on my old hosting) to use for SSL on new hosting?
You can export the certificate, you will find it in the SSL Certificates section, and import it to your new hosting.
Or you can simply re-issue a new certificate just after the migration.
 

Klaus Warzecha

Member
Registered
Joined
Nov 10, 2016
Messages
42
Points
8
Lets encrypt ssl its free, your new hosting provider can issue you a new one so there is very easy to do it.
I don't want to have a new ssl. I want to keep current ssl for new hosting. Is that possible?

You can export the certificate, you will find it in the SSL Certificates section, and import it to your new hosting.
That's true, I see this option in my hosting panel
Paste a pre-generated certificate and key

Or you can simply re-issue a new certificate just after the migration.
If i get a new one, my https (ssl) on my blogs can be interrupted?
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
VirtuBox
Let's Encrypt certificates are only valid for 90 days, so that's why it's not a problem to generate a new certificate instead of keeping the previous one.
But you may have to import your previous certificate if you don't want to have any security errors during the migration, because web browsers will display a warning if you haven't generate a new certificate.
 

isix

Isix Hosting Services
Hosting Provider
Registered
Joined
Feb 21, 2017
Messages
257
Points
18
My sites are using SSL service of Lets encrypt on my hosting but I will move my hosting to a new host next week. The SSL certificate is assigned on an IP address on my hosting, when moving to a new hosting, how can I keep current SSL and do I need to change IP (used on my old hosting) to use for SSL on new hosting?
Simply answer - your new hosting provider has to Lets encrypt enabled on the server you are on.
 

Hugo E.

Member
Registered
Joined
Sep 8, 2014
Messages
62
Points
0
Let's Encrypt certificates are only valid for 90 days, so that's why it's not a problem to generate a new certificate instead of keeping the previous one.
But you may have to import your previous certificate if you don't want to have any security errors during the migration, because web browsers will display a warning if you haven't generate a new certificate.
I am also using Let's Encrypt SSL on my site but I don't know when it will be expired.
I want to check this and renew it before it is expire.
Is there a tool or way to check?

Simply answer - your new hosting provider has to Lets encrypt enabled on the server you are on.
It is necessary condition to enable SSL but you need to save old cer key when moving to a new host.
 

David Beroff

Well-known member
Registered
Joined
Jun 14, 2016
Messages
1,476
Points
63
You can check it e.g. here sslshopper.com/ssl-checker.html
You can do it directly from your web browser by using right-click > inspect > security. You will be able to display the certificate and to see the expiration date.
Thanks you guys for sharing, both worked.
When can we renew SSL?
When SSL on a website is near expire, they will notice about this?
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
VirtuBox
With Let's Encrypt, you can renew your website when you want, and you will be noticed by email if a certificate will expire soon, but the best solution is to setup a cronjob to renew automatically your certificate. With Plesk Onyx, Let's Encrypt certificates are renewed automatically.
 

isix

Isix Hosting Services
Hosting Provider
Registered
Joined
Feb 21, 2017
Messages
257
Points
18
isix
Yes you will get a few notices before the expiring date. Usually 90, 60, 30, 15 ... days before.
 

Klaus Warzecha

Member
Registered
Joined
Nov 10, 2016
Messages
42
Points
8
Klaus Warzecha
Correctly, I got an email from Letsencrypt noticing me my SSL is going to be expired soon.
I don't know why Letsencrypt only allow 3 months period while Cloudflare offered free SSL for 15 years.
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
VirtuBox
Because Let's Encrypt do not host your DNS. It's pretty easy for Cloudflare to provide SSL certificates because all traffic with SSL use their proxy, so they just need to issue new certificates and to add them in their proxy configuration. So you can't use Cloudflare SSL certificates without activating the proxy. It make not possible to use it for another server than Cloudflare's servers.
When you can easily generate a certificate with Let'sEncrypt by pointing your domain on your server IP, but it doesn't mean you will use the certificate on the same server. That's why the period is set to 3 months, essentially to avoid incorrect/illegal usage of their SSL certificates.

But on the security side, you can use strong security parameters with Let's Encrypt than with Cloudflare, and you will not be impacted with security issues like the last Year with Cloudbleed and sessions tokens from Cloudflare displayed on internet.
 

rankmyhub

Well-known member
Registered
Joined
Feb 14, 2017
Messages
193
Points
18
The best solution for you, is to move to a new host with letsencrypt enabled on their web hosting. However you should make note that a small interruption of around 1-4 hours is still possible. Because lets encrypt ssl are alloted or generated based on IP, so when you change the dns to new server and point the A records to their hosting, then it takes around 30 minutes to 24 hours to get the dns propagation to complete. And you can generate letsencrypt certificate on new server once the dns is resolving at the server end. so a small interruption is possible.

However I am not sure, if exporting ssl from old host to new host will work or not in case of letsencrypt ssl certificates. Even it it gets exported and imported correctly, you may get issues during renewal. So I strongly recommend you to generate new LE SSL on your new host fresh. It makes sure that everything works perfectly.

Another solution:

If you want, you can use cloudflare Origin pull SSL certificate, which is offered for 10 years term, so you can install it on existing host and new host at the same time and this will not affect ssl interupption during migration. So this is last solution I have for you, if you are interested in cloudflare ssl. You can get letsencrypt ssl running, once you are moved to new host and everything settles after a few weeks.

Hope this helps you.
 

CaygriWEB

Well-known member
Hosting Provider
Registered
Joined
Jul 4, 2017
Messages
305
Points
18
Yes you can,you only reinstall again on your website.
 

DaRecordon

Well-known member
Registered
Joined
Oct 7, 2016
Messages
242
Points
18
DaRecordon
If your hosting panel has a place to copy and paste existed SSL certifications then you only need to copy and pasting SSL codes without reinstalling SSL. In the other hand, you feel it difficult in moving SSL, reinstall it is the best way though.
 

24x7serverman

Well-known member
Hosting Provider
Registered
Joined
Jul 25, 2017
Messages
651
Points
28
That's correct! Let's encrypt is valid for 90 days only, after that you will need to renew it. Many hosting provider provides it as the free service so your Let's Encrypt SSL certificate will be renewed automatically. If there is no automatic process then you will need to contact your SSL certificate provider or hosting provider.

For any SSL certificate, after moving to new host, you have to re-install it from their server as SSL certificate used to work from the server where your website is pointing. So make sure, before pointing your website to new server, do not install the SSL certificate from that server, it won't work.
 
Recommended Threads
Replies
9
Views
5,205
Replies
1
Views
1,204
Replies
8
Views
2,300
Replies
4
Views
1,429
Replies
0
Views
1,516

Latest Hosting OffersNew Reviews

Sponsors

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top