Table of Contents
- Why Migrate Your GoDaddy SSL
- What You Need Before Starting
- Downloading the SSL Certificate from GoDaddy
- Understanding GoDaddy SSL File Types
- Converting SSL Files (When Necessary)
- Installing SSL on DirectAdmin Step by Step
- Verifying the SSL Installation
- Troubleshooting Common Errors
- Where to Renew Your SSL Next Time
- Frequently Asked Questions
- Summary
1. Why Migrate Your GoDaddy SSL
Many website owners purchase SSL certificates from GoDaddy when they first set up their domain, but later switch to a hosting provider that uses DirectAdmin as the control panel. In this case, you need to install your existing SSL certificate on the new server rather than purchasing a new one prematurely.
Common reasons to migrate your SSL certificate:
- Moving your hosting to AsiaGB or another DirectAdmin-based provider
- Your certificate is still valid — no reason to buy a new one yet
- GoDaddy issued the certificate but it was never installed on the server
- You need the same certificate installed on multiple servers
An SSL certificate purchased from GoDaddy is not tied to their servers. It can be installed on any web server, as long as you have the matching Private Key from when you generated the CSR.
2. What You Need Before Starting
Gather these items before you begin the migration process:
| Item | Details | Required |
|---|---|---|
| GoDaddy Account Access | To download the certificate files | ✅ Required |
| Private Key (.key file) | Generated when you created the CSR — stored on your end | ✅ Required |
| DirectAdmin Access | Admin or user account with SSL enabled for the domain | ✅ Required |
| FTP/SSH Access | For advanced troubleshooting | ⚪ Optional |
| OpenSSL | Only if you received a .pfx file | ⚪ If .pfx |
Your Private Key was generated on your system when you created the CSR. GoDaddy does not store your Private Key. If you have lost it, you must generate a new CSR and request a Reissue from GoDaddy before proceeding.
3. Downloading the SSL Certificate from GoDaddy
Follow these steps to download your SSL files from GoDaddy:
Log In to Your GoDaddy Account
Go to godaddy.com and log in. Navigate to My Products > SSL Certificates or Security > SSL Certificates.
Locate Your Certificate
Click Manage or Setup next to the certificate you want to download. If the certificate is not yet activated, you may need to submit a CSR first.
Download the Certificate Files
Click Download and select Server Type: Apache (or Other). You will receive a .zip file. Extract it to find the .crt certificate file and the bundle.crt CA file.
Open Files in a Text Editor
Open the .crt file in Notepad, VS Code, or any text editor. The content should start with -----BEGIN CERTIFICATE-----. If it does not, the file format may need conversion.
4. Understanding GoDaddy SSL File Types
When you download SSL from GoDaddy (Apache format), you receive these files:
| File Name | Role | DirectAdmin Field |
|---|---|---|
<domain>.crt | Main Domain Certificate | Paste in "Certificate" field |
gd_bundle-g2-g1.crt | CA Bundle / Intermediate Chain | Paste in "CA Root Certificate" field |
<domain>.key | Private Key (if GoDaddy generated CSR) | Paste in "Private Key" field |
If you selected Server Type "Other", GoDaddy may deliver .pem files instead of .crt. The content is identical — DirectAdmin accepts both without any conversion.
5. Converting SSL Files (When Necessary)
If GoDaddy delivered a .pfx file (PKCS#12 format, common if you previously used Windows IIS), you must convert it before installing on DirectAdmin.
Convert .pfx to .crt + .key Using OpenSSL
# Extract the certificate from .pfx
openssl pkcs12 -in certificate.pfx -nokeys -clcerts -out domain.crt
# Extract the Private Key (will prompt for .pfx password)
openssl pkcs12 -in certificate.pfx -nocerts -nodes -out private.key
# Extract the CA Bundle from .pfx
openssl pkcs12 -in certificate.pfx -nokeys -cacerts -out ca_bundle.crtVerify That Private Key Matches the Certificate
# Both outputs MUST be identical — if not, the key is wrong
openssl x509 -noout -modulus -in domain.crt | md5sum
openssl rsa -noout -modulus -in private.key | md5sumInstall Git Bash or use WSL (Windows Subsystem for Linux) to run OpenSSL commands. Alternatively, use the OpenSSL binaries from openssl.org for Windows.
6. Installing SSL on DirectAdmin Step by Step
Once you have your .crt, CA Bundle, and Private Key ready, follow these steps in DirectAdmin:
Log In to DirectAdmin
Access your DirectAdmin control panel at the URL provided by your hosting provider (typically yourdomain.com:2222).
Go to SSL Certificates
From the Dashboard, click Account Manager or Domain Administration, then select SSL Certificates.
Select "Paste a Pre-Generated Certificate and Key"
Choose this option (Tab or Radio Button) instead of generating a new certificate. This mode allows you to paste your existing GoDaddy certificate files.
Paste Your Private Key
Open your .key file in a text editor, copy the entire contents (including -----BEGIN RSA PRIVATE KEY----- header/footer), and paste it into the Private Key field.
Paste the Certificate
Open your domain .crt file, copy its full contents, and paste into the Certificate field. This is your domain certificate — not the CA Bundle.
Paste the CA Bundle
Open your bundle.crt / gd_bundle.crt file, copy all content, and paste into the CA Root Certificate field. This step is critical — omitting it causes chain errors in browsers.
Save and Restart Web Server
Click Save. DirectAdmin will automatically restart Apache/httpd. Allow 10–30 seconds for the changes to take effect.
Newer versions of DirectAdmin have built-in Let's Encrypt integration. To install a commercial GoDaddy certificate, select "Use a Custom Certificate" rather than the automatic Let's Encrypt option.
7. Verifying the SSL Installation
After installation, verify that SSL is working correctly using these methods:
Browser Check
- Visit your site at
https://yourdomain.com - You should see a 🔒 padlock icon in the address bar
- Click the padlock → "Certificate is valid" — check the issuer (should show GoDaddy or Starfield) and expiration date
Online SSL Tools
- SSL Labs: ssllabs.com/ssltest — comprehensive analysis with A–F grade
- AsiaGB SSL Checker: asiagb.com/ssl-checker.html — quick chain check
- What's My Chain Cert: whatsmychaincert.com — specifically checks certificate chain
OpenSSL Command Line Verification
# Check SSL on server
openssl s_client -connect yourdomain.com:443 -servername yourdomain.com
# Verify chain (should return "Verify return code: 0 (ok)")
openssl s_client -connect yourdomain.com:443 -CApath /etc/ssl/certs 2>/dev/null | grep "Verify return"| Result | Meaning | Action Required |
|---|---|---|
| ✅ Grade A or A+ | SSL fully functional | None |
| ⚠️ Chain Incomplete | Missing CA Bundle | Add CA Bundle in DirectAdmin |
| ❌ Certificate Expired | SSL has expired | Renew or purchase new certificate |
| ❌ Hostname Mismatch | Domain does not match CN | Verify you installed the correct certificate |
| ❌ Self-Signed | Still using self-signed cert | SSL installation failed — retry |
8. Troubleshooting Common Errors
"Your Connection Is Not Private" After Installation
- Missing CA Bundle: Go back to DirectAdmin and add the CA Bundle content to the "CA Root Certificate" field
- Certificate Not Yet Active: Confirm GoDaddy sent a validation email and the SSL status shows "Active"
- DNS Still Pointing to Old Server: Wait 1–24 hours for DNS propagation to complete
DirectAdmin Shows "Key Does Not Match Certificate"
The Private Key you pasted does not correspond to the certificate. Use the modulus check command above to confirm they match. If they don't, you need to generate a new CSR in DirectAdmin and request a free Reissue from GoDaddy.
Never paste the CA Bundle into the "Certificate" field or the Certificate into the "CA Root Certificate" field. Each piece of data must go in its correct field — mixing them causes errors that are difficult to diagnose with automated tools.
SSL Installed But HTTP Still Accessible
Add a redirect in your .htaccess file to force HTTPS:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]Mixed Content Warning (Padlock with ⚠️)
Mixed content means some resources (images, scripts, or stylesheets) are still loading over HTTP. To fix:
- Update all resource URLs in your HTML/CSS from
http://tohttps:// - For WordPress, use the Really Simple SSL plugin or Better Search Replace
- Add the header:
Content-Security-Policy: upgrade-insecure-requests
9. Where to Renew Your SSL Next Time
When your GoDaddy SSL approaches its expiration date, you have two main options:
| Option | Pros | Cons |
|---|---|---|
| Renew with GoDaddy | Same provider, same key possible | Higher cost, manual migration still required |
| Purchase from AsiaGB | Competitive pricing, Thai-language support, free DirectAdmin installation | Requires new purchase (no cross-provider renewal) |
AsiaGB SSL Certificates start at 1,000 THB/year for DV SSL with free DirectAdmin installation assistance, Thai-language support, and 99% Uptime SLA.
Get an SSL Certificate from AsiaGB
Thai-language support · Free DirectAdmin installation · From 1,000 THB/year · SSD Storage · 99% Uptime
View SSL Plans10. Frequently Asked Questions
You need three components: (1) the Domain Certificate .crt file, (2) the CA Bundle or Intermediate Certificate, and (3) your Private Key (.key) from when you created the CSR — this must be stored on your end as GoDaddy does not keep it.
No. The Private Key is mandatory. If lost, you must generate a new CSR in DirectAdmin and request a free Reissue from GoDaddy, then download and install the fresh certificate set.
GoDaddy delivers files as .crt (Apache format) which are actually PEM-encoded. They work directly in DirectAdmin without conversion. If you selected "Other" as the server type, you may get .pem files — these also work directly.
Almost always due to a missing CA Bundle (Intermediate Certificate), which creates an incomplete chain. Return to DirectAdmin SSL settings and paste the CA Bundle content into the "CA Root Certificate" field, then save and restart Apache.
If you are already hosting with AsiaGB on DirectAdmin, purchasing SSL from AsiaGB provides the most convenience — free installation help, Thai support, and no need to migrate files between providers again.
Yes, after converting: use openssl pkcs12 -in cert.pfx -nokeys -clcerts -out domain.crt for the certificate and openssl pkcs12 -in cert.pfx -nocerts -nodes -out private.key for the private key. Then paste both into DirectAdmin's SSL fields.
11. Summary
Migrating an SSL certificate from GoDaddy to DirectAdmin is straightforward once you have all three required files: the Domain Certificate (.crt), the CA Bundle, and your Private Key (.key). The key points to remember:
- Each file must go in its correct DirectAdmin field
- Never skip the CA Bundle — an incomplete chain causes browser warnings
- Convert .pfx to .crt/.key with OpenSSL if you received a PKCS#12 file
- Always verify with an SSL checker after installation to confirm Grade and Chain
For your next renewal, consider purchasing SSL directly from AsiaGB to enjoy Thai-language support and free DirectAdmin installation assistance.