How to Install an SSL Certificate on Apache

Prerequisites and the two install paths

Two paths, pick by certificate source:

1. Let's Encrypt (free) — sudo apt install certbot python3-certbot-apache, then certbot --apache -d yourdomain.com; it edits the vhost and installs renewal
2. Commercial certificate — generate a CSR (openssl req), buy, then place the cert chain in SSLCertificateFile/SSLCertificateKeyFile directives
3. VirtualHost :443 — SSLEngine on plus the three file paths inside the HTTPS vhost
4. Redirect port 80 — the RewriteRule block sends all HTTP traffic to HTTPS
5. Restart and verify — apachectl configtest, systemctl reload apache2, browser padlock check

Certbot handles the vhost edits automatically, which is why it's the default answer on a VPS server. Managed cPanel hosting does the same job with AutoSSL — zero commands.

Path 1 — Let's Encrypt with Certbot (automatic)

Path 1 — Let's Encrypt with Certbot (automatic). Do the change this heading names on one site first, then check it in a private browser window or in the mail client, depending on the topic. Change one setting at a time, and undo it if the result is wrong before you try the next. If you want the Jaipur desk to look with you, email support@webji.services — that mailbox is staffed 24/7 in Hindi and English. Phone +91 141 4941811 is business hours only.

Path 2 — commercial certificate with an OpenSSL CSR

Install the certificate on the account that actually serves the site, force HTTPS, then view the page source for http:// images, stylesheets or scripts. The padlock stays broken until those are HTTPS too. Renewal should be automatic; if the padlock disappears, check that the certificate is still bound to this hostname.

Configuring the VirtualHost :443 directives

Configuring the VirtualHost :443 directives. Do the change this heading names on one site first, then check it in a private browser window or in the mail client, depending on the topic. Change one setting at a time, and undo it if the result is wrong before you try the next. If you want the Jaipur desk to look with you, email support@webji.services — that mailbox is staffed 24/7 in Hindi and English. Phone +91 141 4941811 is business hours only.

Forcing the HTTPS redirect on port 80

On certbot, the honest summary is that defaults matter more than brand names — a well-set budget plan outranks a mis-tuned premium one. WebJi® documents its defaults openly and adjusts them per ticket when workloads need it.

Restart failures — configtest and common errors

Two practical notes on ssl.conf: it interacts directly with caching and database response, and misconfiguration is the most common cause of 'hosting is slow' tickets. WebJi® support checks it as part of standard migrations.

Renewal — automatic vs manual

On VirtualHost :443, the honest summary is that defaults matter more than brand names — a well-set budget plan outranks a mis-tuned premium one. WebJi® documents its defaults openly and adjusts them per ticket when workloads need it.