Fullchain PEM Builder

Upload certificate materials

Click to upload files. If intermediate chain is missing, backend will try to fetch it from AIA URL.

Leaf certificate (.crt / .pem)

Required — click to upload

Upload file

Private key (.key / .pem)

Optional — click to upload

Upload file

Intermediate chain (.crt / .pem / .ca-bundle)

Optional — click to upload. Backend will try to discover if omitted.

Upload file

cert filename

fullchain filename

privkey filename

server filename

cert.pem

Leaf certificate only

cert.pem

No content yet.

fullchain.pem

Leaf certificate + intermediate chain

fullchain.pem

No content yet.

privkey.pem

Private key only

privkey.pem

No content yet.

server.pem

fullchain + private key

server.pem

No content yet.

Kubernetes TLS Secret

Secret name

Namespace

apiVersion: v1
kind: Secret
metadata:
  name: tls-secret
  namespace: default
type: kubernetes.io/tls
data:
  tls.crt: <base64-fullchain.pem>
  tls.key: <base64-privkey.pem>

Apply with: kubectl apply -f tls-secret.yaml

Web server config snippets

Certificate path

Private key path

nginx

server {
    listen 443 ssl;
    server_name your-domain.com;

    ssl_certificate     /etc/ssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/privkey.pem;

    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;
}

Apache

<VirtualHost *:443>
    ServerName your-domain.com

    SSLEngine on
    SSLCertificateFile    /etc/ssl/fullchain.pem
    SSLCertificateKeyFile /etc/ssl/privkey.pem
</VirtualHost>