How to Export a Certificate and Add a Password from the DigiCert Certificate Utility

Swinerton Logo

BTech

BTech Alerts & Notifications - Check this page for the latest information on emergencies and system outages. All times are Pacific. DigiCert Logo

TLS/SSL Certificates Overview, 1000060634.
- Intermediate Certificate Renewal Process.
- DigiCert Certificate Process.

Certificate Information

Overview 

The following will guide you through exporting a Certificate Signing Request (CSR) from the DigiCert Certificate Utility app.
The following process also includes exporting and assigning a password Certificate.

Steps to Perform

Launch the DigiCert Certificate Utility for Windows, 1000060622.Click to Show/Hide How to Launch the DigiCert Certificate Utility for Windows
Click SSL (lock icon) on the left-side of the menu.
Select the applicable certificate.
Click Export Certificate.
Keep the default setting to export the private key as a PFX file.
Click Next.
Generate a complex password to use for the certificate using at least 20 characters.
- Remember to store the password in CyberArk.
Click Next.
Choose a location to save the file and add the certificate expiration date in the file name
- Example: ‘wildcard_swinerton_com_exp_jan_2022.pfx’.
Click Finish.
Click OK.
Close the DigiCert Certificate Utility app, click Close.
The certificate export process is now complete.
Copy the PFX file to the secured location in: Z:\SI\BTech\IT Operations\_SECURED\Certs\Public
- The PFX filename should include the certificate expiration date in the file name.
  - Example: ‘wildcard_swinerton_com_exp_jan_2022.pfx’.
IMPORTANT - Store the certificate password in CyberArk using the following options:
- System Type: Windows
- Platform: SI Windows Domain Account (this is where the previous certs are stored)
- Safe: ITOPS - Secure
- Address: *.swinerton.com
- Username: Wildcard Certificate - Expires MMM YYYY (ex. Mar 2025)
- Password: (from the export process)
- Leave the rest of the fields blank.
- Deselect Account Management with this reason: Not needed for a certificate.
- Click Add to save the account information.
  - To verify that the entry was added correctly, search the CyberArk accounts for: *.swinerton.com
Add the new certificate information to the Certificate Usage Tracker: Certificate Usage Tracker.xlsx
The Wildcard Certificate Renewal Process is now complete.