Knowledge base

This guide explains how to add two different EV or DV SSL Certificates to the same site.

As it's not possible to install two SSL certificates on the same site, it's necessary to create two identical sites.

Prerequisites

• remove any potential domain name aliases from your site 

Creating the Second Site

To access Web hosting to add a site :

1. log in to the Infomaniak Manager (manager.infomaniak.com) from a web browser like Brave or Firefox
2. click on the icon in the top right corner of the interface (or navigate through the left sidebar menu, for example)
3. choose Hosting (universe Web & Domain)
4. click on the name of the relevant object in the displayed table
5. click on the Add a site button (in the Sites section)
6. proceed without installing any tools
7. choose between using a domain name or a subdomain
8. indicate the domain name or subdomain
9. click on Advanced options
10. enable (or not) the Let's Encrypt SSL certificate on the future site
11. check the box Set location manually
    
12. choose the same location as the main site
13. choose the same PHP version as the main site
14. click on the blue Continue button

Installing the SSL Certificate

Once the second site is created and DNS propagation is complete (this can take between 24 to 48 hours after creating the site), you'll be able to install an SSL certificate (if you chose not to install the certificate in step 10 above).

To access the management of the website :

1. log in to the Infomaniak Manager (manager.infomaniak.com) from a web browser like Brave or Firefox
2. click on the icon in the top right corner of the interface (or navigate through the left sidebar menu, for example)
3. choose Website (universe Web & Domain)
4. click on the name of the relevant object in the displayed table
5. click on SSL Certificates in the left sidebar menu
6. click on the blue Install an SSL certificate button and follow the procedure

This guide explains how to obtain a .p12 2048 bits SSL certificate, useful notably for SAP, Salesforce, etc., from the Infomaniak infrastructure.

Obtaining a p.12 type certificate

A p.12 type certificate is a container that includes the certificate, intermediate CAs, and the key itself.

It is possible to create this type of certificate yourself using what can be downloaded from the Infomaniak Manager:

• Order a certificate for the domain sap.domain.xyz by providing a CSR (which means having the private key, named e.g., server.key)
• Download the generated certificate from the Infomaniak Manager: sap.domain.xyz-15-03-2024.zip
• Unzip the archive
• Execute openssl pkcs12 -export -out server.p12 -inkey server.key -in sap.domain.xyz.crt -certfile ca_bundle.crt

A file server.p12 will then be obtained.

If the certificate was generated without a CSR, the .key file present in the downloaded zip will serve as the key.