To install a GoDaddy SSL certificate on Apache, place the issued certificate, its matching private key, and GoDaddy’s intermediate bundle on the server, reference all three in a TLS virtual host listening on port 443, run the platform-appropriate Apache configuration test, and restart only after it returns Syntax OK. The private key must remain secret and must match the certificate generated from your CSR.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What you need before changing Apache
An Apache HTTPS installation depends on three related files. Download the issued certificate from GoDaddy SSL Manager after the request is approved, locate the private key that was created with the certificate signing request (CSR), and obtain the current GoDaddy intermediate certificate or bundle. For Apache installations, GoDaddy’s repository provides a file named gd_bundle.crt. The certificate and key are a pair: a certificate from one CSR cannot be used with a private key from another CSR.
As an Amazon Associate I earn from qualifying purchases.
- Issued certificate: the server certificate supplied for your domain, commonly ending in
.crt. - Matching private key: the key generated when the CSR was created, commonly ending in
.key. - Intermediate chain: GoDaddy’s current intermediate certificate or Apache bundle, such as
gd_bundle.crt. - Apache access: root or equivalent administrative access so you can read the configuration, protect the key, test the syntax, and restart the service.
Keep the private key in a directory readable only by root whenever practical. Never email it, upload it to a support ticket, or send it to GoDaddy or another person. GoDaddy’s guidance is explicit that you should not send your private key to anyone else.
Find the right Apache configuration
Apache layouts vary by operating system and by administrator customization. GoDaddy identifies these common defaults:
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
| System | Common configuration file | Configuration test | Restart command | Typical configuration directory |
|---|---|---|---|---|
| Ubuntu | /etc/apache2/apache2.conf |
apache2ctl configtest |
apache2ctl restart |
/etc/apache2/ |
| CentOS | /etc/httpd/httpd.conf |
apachectl configtest |
apachectl restart |
/etc/httpd/ |
These are documented defaults, not guarantees. A hosting provider or previous administrator may have split virtual hosts into separate files. Search the Apache configuration tree for SSLCertificateFile to find the active TLS configuration and to avoid editing an unused example file. Examine the surrounding virtual-host block so you preserve the existing site identity and document root.
Store and identify the certificate files
Place the three files in a stable, protected directory rather than in a web-accessible document root. Use the exact paths in your Apache directives; filenames alone are not sufficient if Apache cannot read them. A practical arrangement might keep the issued certificate, private key, and bundle together under an administrator-only directory, but the directory name is your choice.
Confirm which file is which before editing Apache. The issued certificate is the file downloaded for the approved request. The private key is the key created alongside the CSR, not a newly generated key made after issuance. The intermediate file should be the current GoDaddy file intended for Apache. GoDaddy’s certificate repository offers PEM and DER formats as well as an Apache bundle; use the format and bundle appropriate to your installation.
If the private key is missing, look at the existing SSLCertificateKeyFile directive in the active Apache configuration. That line often reveals the expected path and filename. Search for a .key file in the administrator’s certificate directories. If the key truly cannot be recovered, the issued certificate cannot simply be paired with a replacement key; GoDaddy says you may need to rekey the certificate by generating a new CSR and completing the resulting issuance process.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Create the HTTPS virtual host
Open the active Apache configuration and add or update a TLS virtual host. The essential details are a listener on port 443, the same site identity as the existing HTTP host, and paths to all three certificate files. This is a complete pattern using illustrative values:
<VirtualHost YOUR_SERVER_IP:443>
DocumentRoot /var/www/example
ServerName example.com www.example.com
SSLEngine on
SSLCertificateFile /etc/ssl/example/issued-certificate.crt
SSLCertificateKeyFile /etc/ssl/example/privatekey.key
SSLCertificateChainFile /etc/ssl/example/gd_bundle.crt
</VirtualHost>Replace the example paths with the actual locations on your server. The YOUR_SERVER_IP value can be the address used by your existing Apache host; if your current configuration uses a wildcard address, preserve that established pattern. The important change is the :443 port in the TLS host.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Preserve the site’s identity
Keep the existing DocumentRoot so HTTPS serves the same files as HTTP. Keep the existing ServerName and any established aliases, such as the www name shown in the example. A certificate can be perfectly valid yet appear wrong to visitors if Apache selects a different virtual host because the hostname or address does not match the original site block.
Point each directive to the intended file
SSLCertificateFilepoints to the issued GoDaddy certificate.SSLCertificateKeyFilepoints to the private key generated with the CSR.SSLCertificateChainFilepoints to the matching GoDaddy intermediate certificate or Apache bundle, such asgd_bundle.crt.
Do not substitute the private key for the certificate, and do not omit the chain when your clients require the intermediate certificate to build trust. A chain file from a different issuance or an outdated intermediate can produce trust warnings even when the server certificate itself is correct.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Do not expose the key through the website
The private key must not be inside the document root or any directory Apache serves as normal web content. Restrict ownership and permissions according to your operating system’s security policy, and check that the Apache process can read the certificate and chain while the key remains inaccessible to ordinary users. If you move files, update the directives to the new absolute paths before testing.
Test Apache before restarting
Always run a configuration test first. A malformed directive, misspelled path, missing module, or invalid virtual-host block can prevent Apache from starting after a restart. GoDaddy specifically instructs administrators to require a Syntax OK response before proceeding.
- On Ubuntu, run
apache2ctl configtest. - On CentOS, run
apachectl configtest. - Continue only when the command reports
Syntax OK. - If Apache reports an error, read the file and line number in the message, correct that issue, and run the same test again.
A successful syntax test confirms that Apache can parse the configuration. It does not prove that the certificate and private key belong together or that every client will trust the chain, so those installation details still need checking when you troubleshoot a browser warning.
Restart Apache after a successful test
Once the appropriate configuration test returns Syntax OK, restart Apache with the command for your platform:
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
- Ubuntu:
apache2ctl restart - CentOS:
apachectl restart
Restarting applies the new TLS virtual host without changing the files in your document root. If the restart fails, do not repeatedly retry with untested edits. Return to the configuration test output, correct the reported problem, and test again before another restart.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Diagnose the common installation failures
Apache says the syntax is invalid
Do not restart while the test reports an error. Check for an unclosed <VirtualHost> block, a directive typed incorrectly, a path that contains a typo, or a line copied into the wrong configuration context. The error output normally identifies the file and line to inspect. After each correction, rerun the same OS-specific configtest command until it returns Syntax OK.
The private key cannot be found
Inspect the active SSLCertificateKeyFile line and verify that the referenced file exists at that exact path. Search the server for the CSR-generated .key file, including directories used by the earlier certificate installation. Do not generate a random replacement and expect it to work with the existing certificate. If the original key is permanently unavailable, rekeying may be necessary. Keep any recovered key confidential.
The certificate and key do not match
A configuration can parse correctly while Apache rejects the certificate during startup or clients receive an unusable service. This usually means the key belongs to a different CSR or the certificate file is not the one issued for that key. Recheck the issuance files and the key path in the active virtual host. Use the original CSR-generated key; if it is unavailable, begin the rekey process rather than sending the key to a third party.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Browsers report an incomplete or untrusted chain
Confirm that SSLCertificateChainFile points to the intermediate certificate or bundle that matches the issued certificate. GoDaddy’s repository provides current files in PEM and DER forms and an Apache bundle. Replace an old or mismatched intermediate with the current Apache-compatible file, then rerun the configuration test and restart Apache. A trusted server certificate does not eliminate the need to provide the intermediate chain to clients that do not already have it.
The wrong website appears over HTTPS
Check that the TLS virtual host listens on port 443 and uses the same DocumentRoot and ServerName as the original site configuration. If those values differ, Apache may select another host or serve another directory. Compare the complete HTTP and HTTPS blocks rather than changing only the certificate filename. Customized installations may define virtual hosts in a separate file, so make sure you edited the file Apache actually loads.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Apache cannot read a file
Verify the absolute paths, ownership, and permissions of the certificate, key, and chain. The directory must be traversable by the Apache service account while the private key remains restricted from ordinary users. Moving a file without updating its directive, renaming gd_bundle.crt, or placing a file under a protected directory that Apache cannot traverse can all produce startup errors. Correct the path or permissions, then rerun configtest.
Renew an existing GoDaddy certificate
Renewal uses the same Apache arrangement but introduces a new issued certificate and potentially a refreshed intermediate bundle. GoDaddy documents copying the renewed certificate, intermediate bundle, and the CSR-generated key as appropriate, updating httpd.conf, and restarting Apache.
- Complete the renewal and download the newly issued certificate from SSL Manager.
- Obtain the current GoDaddy intermediate certificate or Apache bundle.
- Confirm which private key was used for the renewal CSR. Keep using the existing key only if the renewal was created from that CSR; otherwise use the new CSR’s matching key.
- Copy the files into the protected certificate directory, or update the existing files in place according to your change-control procedure.
- Update the active TLS virtual host so each directive references the intended renewed certificate, key, and chain.
- Run the platform-specific
configtestand requireSyntax OK. - Restart Apache with
apache2ctl restarton Ubuntu orapachectl restarton CentOS.
Keep the previous certificate files until the renewed configuration has been tested and successfully restarted, but do not leave obsolete private keys in broadly readable locations. Once the renewal is confirmed, remove superseded material according to your retention and backup policy.
Operational checklist
- The GoDaddy request is approved and the issued certificate has been downloaded.
- The private key was generated with the CSR used for this certificate and has not been shared.
- The current intermediate certificate or
gd_bundle.crtis available for Apache. - The files are stored outside the web document root with restrictive permissions.
- The TLS virtual host listens on
:443. DocumentRootandServerNamematch the intended site.SSLCertificateFile,SSLCertificateKeyFile, andSSLCertificateChainFileeach contain the correct absolute path.- The correct operating-system command returns
Syntax OK. - Apache is restarted only after a successful test.
GoDaddy notes that manual installation instructions differ by server and operating-system version. If your server does not resemble the Ubuntu or CentOS layouts above, use the same principles—locate the loaded Apache configuration, configure the three files in the port-443 virtual host, run that platform’s syntax check, and restart only after a clean result—while following your server’s own Apache documentation.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
