Some time ago, Namecheap launched a Symantec certificate replacement program that allows Symantec SSL certificates to be replaced with Comodo SSL certificates free of charge. Moreover, the new certificate is valid for three years, which seems like a great deal. Last month, I replaced the certificate for my www.ikxin.com with a Comodo certificate, and today I’m writing a detailed replacement tutorial for you.

Friendly Reminder:

Currently, the free DV SSL certificates offered by Alibaba Cloud, Tencent Cloud, West.cn, and others are issued by Symantec.

Steps

Prerequisites

  • Have already applied for a Symantec SSL certificate (such as the free SSL certificates applied for through Alibaba Cloud, Tencent Cloud, or West.cn).
  • Register an account on the Namecheap official website.

Step One

Visit the Namecheap Symantec Replacement page to check the website where you have already deployed a Symantec SSL certificate. This tutorial uses an image-hosting domain as an example. As shown in the image below, after the check passes, click Activate free SSL to continue to the next step.

Step One

Step Two

Use the online CSR generation tool ChinaSSL CSR Generator, as shown in the image below.

Step Two

After generation, there will be two files: a CSR file and a KEY file. The CSR file is needed when applying for the certificate, while the KEY file is needed to deploy SSL after the application is approved. Be sure to keep them safe.

Step Three

Return to Namecheap, submit the CSR file, click Next, and make the selections shown in the screenshot below.

Step Three

Step Four

Verify the domain. You can choose HTTP file validation or DNS validation—choose whichever is more convenient. This time, HTTP validation is selected.

Step Four

Step Five

Fill in the company information and other details. For required fields, you can simply use pinyin instead (OPTIONAL fields may be left blank). At the bottom, you need to enter the email address for receiving the SSL certificate.

Step Five

Step Six

Complete the HTTP validation, then wait for the certificate to be sent to your email.