Atomile allows you to upload externally purchased and issued SSL/TLS certificates to the platform for centralized management. After uploading a certificate, you can associate it with the corresponding authorized domain name and deploy it for your CDN service. This guide explains how to upload and manage your existing SSL/TLS certificates in Atomile.

In addition to uploading your own certificates, you can use Atomile’s one-click certificate application to quickly obtain a free Let’s Encrypt or ZeroSSL HTTPS certificate. The certificate will be automatically deployed to your selected domain on the Atomile platform. For more details, refer to One-Click Certificate.

To ensure that you receive certificate expiration reminders in a timely manner, navigate to the My Certificates page, click Certificate Reminder Recipient, and configure the recipient information and notification channels. Atomile currently supports email, in-platform notifications, and API BOT message push notifications.

Uploading Your SSL/TLS Certificate

1. Log in to the Atomile Console, then navigate to Certificate MGMT > SSL Certificates > My Certificates in the left-side menu. Click Upload Certificate. You can also find this button on the certificate Overview page.
2. Atomile provides three methods for uploading certificates: Import From the Certificate File, Import From Certificate File (with passphrase), and Paste Certificate Content. Both RSA and ECC certificates are supported. Each method is described below.

Import Certificate from File

1. Enter the Certificate Name and optional Remarks.
2. Upload your certificate file and click Parse File to extract the certificate details.
3. If parsing succeeds, the system displays the certificate information.
4. Confirm the details and click Submit to complete the upload. If parsing fails, verify that the certificate file is correct and not corrupted.

Note:
This method allows you to upload up to 10 files at the same time, and each file must not exceed 44 KB. Supported file formats are: .pem, .key, .crt, .cer, .der, .pfx, and .jks.

Import Encrypted Certificate from File

1. Enter the Certificate Name and optional Remarks.
2. Enter the Private Key File Password.
3. Upload your encrypted certificate file and click Parse File to extract the certificate details.
4. If parsing succeeds, the system displays the certificate information.
5. Confirm the details and click Submit to complete the upload. If parsing fails, verify that the certificate file is correct and that the password is accurate.

Note:
This upload method supports only a single certificate file in .pem format.

Paste Certificate Content

1. Open your certificate file in a text editor such as Notepad, and extract the public key, private key, and CA certificate, if applicable.
2. Enter the Certificate Name and optional Remarks, then paste the extracted certificate content into the corresponding text boxes. Make sure that there are no extra line breaks or spaces.
3. Before submission, the system automatically checks whether the public key and private key match. If an error or mismatch is detected, the system displays an error message and prevents the upload.

Modifying Your Certificate

Update an existing certificate when it is about to expire or needs to be replaced in order to avoid website access issues caused by an invalid certificate.

1. Log in to the Atomile Console, then navigate to Certificate MGMT > SSL Certificates > My Certificates.
2. Find the certificate you want to modify and click Edit in the operation column to open the certificate editing page.
3. Use any of the three upload methods described above to update the certificate content:
   • Import Certificate from File: Upload an unencrypted certificate file.
   • Import Encrypted Certificate from File: Upload an encrypted certificate file and enter the corresponding private key password.
   • Paste Certificate Content: Paste the public key, private key, and CA certificate content directly.
4. Review the updated certificate information and click Submit to save your changes.

Note:
If the current certificate is already associated with multiple accelerated domains, the system verifies whether the new certificate is valid for those domains during the update. The certificate can be updated only if all associated domains pass validation.

To avoid creating duplicate certificate entries and having to re-associate domain names, always use the Edit feature to update existing certificates.

Viewing Your Certificate

1. Navigate to Certificate MGMT > SSL Certificates > My Certificates.
2. Click the certificate name to open the certificate details page, which displays the basic certificate information and the list of associated domains.
3. You can also unbind domains from a certificate directly on this details page.

For security reasons, when viewing certificates, you can see only the public key, CA certificate, and associated domains. Sensitive information such as the private key is not displayed.

Deleting Your Certificate

1. Navigate to Certificate MGMT > SSL Certificates > My Certificates.
2. In the certificate list, locate the idle certificate you want to delete and click Delete in the operation column.
3. A confirmation dialog appears. Carefully verify the certificate name, then click Confirm to proceed with deletion, or click Cancel to abort.

Note:
To protect website security, you can delete only idle certificates that are not associated with any acceleration domains. Certificates in use must first be unbound from all domains before they can be deleted.

Deleting a certificate is irreversible. If needed, back up the certificate files before deletion for future use.

Associating Certificates with Domains and Deployment

Atomile makes it easy to associate SSL/TLS certificates with your domain names for HTTPS delivery. You can deploy a single certificate or use both RSA and ECC certificates in a dual-certificate configuration.

Note:
A single certificate can be associated with up to 200 domain names at the same time.

Make sure that the certificate’s authorized domain matches the actual acceleration domain configured on the Atomile platform. For example, if your certificate is issued only for a1.abc.com, do not associate it with a wildcard domain such as *.abc.com that resolves to a2.abc.com, as this may cause access issues.

Associating a Single Certificate with Domains

1. Navigate to Certificate MGMT > SSL Certificates > My Certificates.
2. Find your certificate and click Associate Domain in the operation column. Select the domains where you want to deploy the certificate, move them to the list of selected domains on the right, then click Pre-Deploy or Deploy to complete the operation.

Setting Up Dual Certificate Deployment

1. First, complete the steps in Associating a Single Certificate with Domains to deploy your first certificate, typically the RSA certificate.
2. On the My Certificates page, locate your second certificate, typically the ECC certificate, select the domains for dual-certificate deployment, move them to the list of selected domains on the right, and click Next.
3. On the certificate confirmation page, if the selected domains already have an RSA certificate deployed, the system asks whether you want to deploy the ECC certificate as a second certificate or replace the existing RSA certificate. Select the desired option and click Deploy.
4. After deployment is successful, Atomile CDN edge servers prioritize the higher-performance ECC certificate when the client supports it, while maintaining backward compatibility with RSA certificates for older clients.

Note:
Due to platform limitations, dual-certificate deployment for domains does not support the pre-deployment feature.

Important Notes

The Atomile Console currently supports only self-service management and configuration of SNI-based SSL/TLS certificates. If you need to add or modify non-SNI certificates, contact Atomile technical support for assistance.