---
title: "User certificates"
sidebar_label: "User certificates"
sidebar_position: 1
description: "How to add a certificate issued by third-party certificate authorities to the certificate manager; how to update a user certificate"
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import MoreVerticalIcon from '@selectel/docux/icons/more-vertical'
import {TabItemLabel} from '@selectel/docux/components'

# User certificates

You can upload to the certificate manager a user certificate that you issued with a third-party certificate authority. To do this, you need:

* the primary domain certificate;
* a private key;
* optional: one or more intermediate certificates. Intermediate certificates bind the final TLS certificate to the root certificate authority; they are used by the browser to verify the authenticity of the issued TLS certificate;
* optional: a root certificate—the part of the key with which certificate authorities sign TLS certificates. It may be required when using self-signed certificates.

## Add a user certificate \{#add-user-certificate}

<Tabs>
  <TabItem value="panel" default>
    <TabItemLabel>
      Control panel
    </TabItemLabel>

    1. A user certificate is only valid in the [project](/access-control/projects/about-projects.mdx) to which it was added. Make sure you are in the correct project. To do this, open the project menu (the title of the current project) and select the project.

    2. In the [Control panel](https://my.selectel.ru/certificates/), from the top menu, click **Products** and select **Certificate Manager**.

    3. In the **Certificates** section, click **Add certificate**.

    4. Select **User certificate**.

    5. Enter a certificate name.

    6. Paste the primary domain certificate. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

    7. Paste the private key. It must start with `-----BEGIN PRIVATE KEY-----` and end with `-----END PRIVATE KEY-----`.

    8. Optional: to add an intermediate certificate:

       8.1. Select the **Add intermediate certificate** checkbox.

       8.2. In the **Intermediate certificate** field, paste the certificate. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

       If you need to add multiple intermediate certificates, ensure that all the certificates (the primary domain certificate, intermediate certificates, and root certificate) form a complete chain. The `Issuer` value of the primary certificate must match the `Subject` value of the first intermediate certificate, the `Issuer` value of the first intermediate certificate must match the `Subject` value of the second intermediate, and so on.

       Intermediate certificates can be added to the **Intermediate certificate** field in any order; it is important to use the full chain.

    9. Optional: to add a root certificate:

       9.1. Select the **Add root certificate** checkbox.

       9.2. In the **Root certificate** field, paste the certificate. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

    10. Click **Add**.
  </TabItem>

  <TabItem value="terraform">
    <TabItemLabel>
      Terraform
    </TabItemLabel>

    Use the [Add certificate](/terraform/examples/certificates-manager/add-certificate/) guide in the Terraform documentation.
  </TabItem>
</Tabs>

## Update a user certificate \{#update-user-certificate}

1. In the [Control panel](https://my.selectel.ru/certificates/), from the top menu, click **Products** and select **Certificate Manager**.

2. In the certificate menu, select **Update**.<MoreVerticalIcon />

3. Paste the primary domain certificate. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

4. Paste the private key. It must start with `-----BEGIN PRIVATE KEY-----` and end with `-----END PRIVATE KEY-----`.

5. Optional: to add an intermediate certificate, select the **Add intermediate certificate** checkbox and paste the certificate in the **Intermediate certificate** field. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

   If you need to add multiple intermediate certificates, ensure that all certificates (primary domain certificate, intermediate, and root) create a complete chain. The `Issuer` value of the primary certificate must match the `Subject` value of the first intermediate certificate, the `Issuer` value of the first intermediate certificate must match the `Subject` value of the second intermediate, and so on.

   Intermediate certificates can be added to the **Intermediate certificate** field in any order; it is important to use the full chain.

6. Optional: to add a root certificate, select the **Add root certificate** checkbox and paste the certificate in the **Root certificate** field. It must start with `-----BEGIN CERTIFICATE-----` and end with `-----END CERTIFICATE-----`.

7. Click **Update**.

<Formbricks />