> ## Documentation Index
> Fetch the complete documentation index at: https://docs.weborion.io/llms.txt
> Use this file to discover all available pages before exploring further.

# SSL/TLS Certificates

> Add and manage SSL/TLS certificates for your replicated domains.

SSL/TLS certificates allow WebOrion Restorer to serve your replica over HTTPS. You can manage certificates under **Serving Configuration → SSL/TLS Certificates**.

## Adding a certificate

1. Go to **Serving Configuration → SSL/TLS Certificates**
2. Click **Add New Certificate**
3. Fill in the following fields:

| Field                                  | Description                                                                                               |
| -------------------------------------- | --------------------------------------------------------------------------------------------------------- |
| **Name**                               | A label for the certificate                                                                               |
| **Priority**                           | Enter `1` to prioritise this certificate when multiple certificates exist                                 |
| **New Certificate (PEM format)**       | The end-user SSL certificate                                                                              |
| **New Certificate Chain (PEM format)** | The chain of SSL certificates from the intermediate certificate up to the root                            |
| **New Private Key (PEM format)**       | The private key corresponding to the certificate, used for encrypting data between the server and browser |

4. Click **Add Certificate** to save

## Editing a certificate

1. Go to **Serving Configuration → SSL/TLS Certificates**
2. Click the **gear icon** next to the certificate you want to update
3. Update any of the certificate fields — leave fields blank to keep existing values unchanged
4. Click **Update Certificate** to save

## Deleting a certificate

If a certificate has expired and needs to be replaced, click **Delete Certificate** on the edit page to remove it before adding a new one.
