What is an SSL certificate transfer?
What actually moves
An SSL certificate is tied to a domain name and a private key, and the private key must stay secret. When people talk about transferring a certificate, they usually mean installing it on a new server or hosting account. The certificate file itself can often be copied, but the private key has to move with it.
Some providers let you download the certificate and key, while others only let you reissue a new certificate on the new host. Reissuing creates a fresh key pair, which is often the cleaner option when you cannot find the original key.
- Find the certificate and private key you already have
- Check whether your provider offers an export option
- Reissue if the original key is lost
Doing it safely
Move the private key over a secure channel and avoid sending it by email. Install the certificate and the intermediate chain on the new host, then test the site in a browser and with an online checker. Keep the old certificate active until the new one works.
Be careful when a certificate was bought through one provider and is being moved to another. Terms, reissue rules, and fees can differ, so read the current support documentation before starting.
Common mistakes
- Deleting the old certificate before the new one is confirmed working.
- Sending the private key through unsecured email or chat.
