Follow the instructions of your certificate provider

Updating or installing a TLS certificate, or its older predecessor SSL, often depends on the format of the certificate and the certificate provider. For more exact instructions reach out to your certificate provider for details. For example, GoDaddy has specific instructions for installing their certificates on IIS. 

General certificate instructions using a PFX file

This page explains how to import a new TLS/SSL certificate into your server and replace the expiring certificate for your site. You must already have the PFX file handy from your certificate provider. It should be exported with all certificates in the chain and ideally have a password for security.

Install the new SSL certificate on web server

1. On the server, right-click the new SSL certificate > select Install PFX to open the Certificate Import Wizard.
2. For Store Location, choose Local Machine. Click Next.
3. For File name, input the file path of your SSL certificate. Click Next.
4. Enter your password for the certificate. For Import options, check the boxes for the settings below, then click Next.
   • Mark this key as exportable
   • Include all extended properties
5. Select Place all certificates in the following store and choose the Personal folder. Click Next.
6. Click Finish.

Replace SSL certificate in IIS

1. Open IIS.
2. Expand the Sites folder. Click on your site.
3. Open your site's bindings (right side).
   
   
   
   
4. Edit your https binding.
5. In the SSL certificate dropdown, select the new certificate that you imported earlier.
   
   
   
   
6. Click OK and close the window.

Test it out

Go to your site and confirm in the browser that the new SSL certificate is showing with the correct Valid from date range.