EV Certificate Download

Certificate Issuance and Download

Once all Order Actions are marked Completed, the CA processes and issues the certificate. This typically happens automatically within minutes to a few hours of the final action being completed. No action is required from you at this stage.

Download Notification Email

The Organization Representative receives an email with the subject: 'ORDER #[ID] - Your Certificate is ready for download'.

• The email contains Order ID, Ordered Date, Product & Validity, and the Identifier (domain).

• It includes an orange "Download Certificate" button linking to the emSign Subscriber download page.

• Click the "Download Certificate" button in the email. This opens the emSign Subscriber download page.

emSign Subscriber Portal - Certificate Download Page

The download confirmation page shows:

• A green tick with: "Thanks for completing the necessary steps."

• "Your certificate has been issued and ready for download. To continue further, please click Download Certificate."

• Order ID, Product & Validity, and Domain Name details.

• Orange "Download Certificate" button.

Certificate Download in Order Actions

Expanding the final Certificate Download action in the Order Actions list reveals the following:

Text shown in the expanded panel:

> Your certificate has been issued and ready for download. An email containing certificate download instructions has been sent to your email ID. In case you have not received an email, please click Resend Email to resend the email. Your certificate is based on the CSR submitted by you. Please ensure to import / use the certificate against the same key-pair, from where the CSR was generated.

Resend Email

Re-sends the download notification email to the Organization Representative's email address. Use this if the original email was not received.

Download Certificate

Initiates the certificate download directly from the portal, bypassing the email.

🚨 CRITICAL CRITICAL: Your certificate MUST be installed with the matching private key. If you have lost your private key, you will need to generate a new CSR and request a reissue. After installation, verify your certificate using SSL Labs (ssllabs.com/ssltest) to confirm it is correctly installed and trusted by major browsers. EV certificates display the organization's name in the browser address bar - confirm this appears correctly after installation. For EV SSL Certificate UCC: the issued certificate file contains Subject Alternative Name (SAN) entries for ALL your domains. You install ONE certificate file that covers all domains simultaneously.

Selecting the Download Format

When initiating a download from CERTInext, a 'Select the Format to download' dialog appears with four options:

DER encoded binary X.509 (.CER)

Binary format of the certificate. Compact and widely supported by Windows systems and Java keystores. Choose this for Windows Server (IIS) or Java-based servers.

Base-64 encoded X.509 (.CER)

Text-based (PEM) format of the certificate, saved with the .CER extension. Readable in a text editor. Choose this for most Linux/Unix-based servers (Apache, Nginx), or when your server software requests a .CER file.

Base-64 encoded X.509 (.CRT)

Identical content to the Base-64 .CER above but saved with the .CRT file extension. Choose this when your server software (e.g., Apache, Nginx) expects a .crt file extension.

Zip

A ZIP archive containing the certificate along with any intermediate/chain certificates. Recommended for most installations. Choose Zip if you are unsure, or if your server requires the full certificate chain. Extract the ZIP and follow your server's installation guide.

Choose the one applicable to your scenario based on the above description

ℹ INFO Which Format to Choose If in doubt, choose Zip - it includes all necessary certificate files (end-entity certificate + intermediate certificates/chain). Your web server administrator will know how to handle the extracted files. For quick Windows inspection, choose DER or Base-64 .CER.