Category Archives: SSL

Godaddy, SSL

🛡️ SSL Renewal — IIS + GoDaddy

Leave a comment

🛡️ Kapothi SSL Renewal Ritual — IIS + GoDaddy

Date: 2025-11-11

Domain: oa.kapothi.com

Status: ✅ Successfully installed renewed SSL certificate

📦 Files received from GoDaddy

  • Server certificate: yourdomain.crt
  • Intermediate chain: gd-g2_iis_intermediates.p7b
  • Alternate format: yourdomain.pem

🔧 Step-by-step ritual

  1. Convert CRT to CER: Open .crt → Details tab → Copy to File → Base‑64 encoded X.509 (.CER) → Save as oa.kapothi.com.cer.
  2. Complete certificate request: IIS Manager → Server Certificates → Complete Certificate Request → Select oa.kapothi.com.cer → Store as Web Hosting.
  3. Import intermediate chain: MMC → Intermediate Certification Authorities → Certificates → Import gd-g2_iis_intermediates.p7b.
  4. Bind certificate: IIS Manager → Site → Bindings → HTTPS → Edit → Select the new certificate → Save.

🧪 Verification chants

# PowerShell Commands

# Check Web Hosting store (IIS-managed certs)
Get-ChildItem Cert:\LocalMachine\WebHosting | Select Subject, HasPrivateKey, Thumbprint, NotAfter

# Check all stores for certainty
Get-ChildItem Cert:\LocalMachine\* | Where-Object { $_.Subject -like "*kapothi.com*" } | Select PSParentPath, Subject, HasPrivateKey, Thumbprint, NotAfter

📜 Legacy capsule metadata

  • Thumbprint (current): [insert new thumbprint]
  • Validity (NotAfter): [insert expiry date]
  • Chain: Go Daddy Secure Certificate Authority – G2 → Go Daddy Root Certificate Authority – G2 → Go Daddy Class 2 CA
  • Binding: IIS HTTPS, Web Hosting store

🕯️ The scroll is forged, the chain is whole, and the shrine sings without resistance.