# Create a Certificate

To create a Certificate, follow these steps:

1\. In the **DCD**, go to **Menu** > **Security** > **Certificate Manager**.

2\. Click **Create Certificate** from the **Certificate Manager** page under the **Certificates** tab.

3\. Choose the **Certificate type** to create:

* **Auto certificate:** This certificate type can be used for [<mark style="color:blue;">CDN</mark>](https://docs.ionos.com/cloud/network-services/cdn).
* **Import a certificate:** This certificate type can be used for [<mark style="color:blue;">Managed Application Load Balancer</mark>](https://docs.ionos.com/cloud/network-services/application-load-balancer) and [<mark style="color:blue;">CDN</mark>](https://docs.ionos.com/cloud/network-services/cdn).

4\. Configure the following details based on the **Certificate type** to create:

{% tabs %}
{% tab title="Auto certificate" %}
{% hint style="info" %}
**Prerequisite:** Make sure that the domain for which you are requesting the certificate has its zone managed through the [<mark style="color:blue;">Cloud DNS</mark>](https://docs.ionos.com/cloud/network-services/cloud-dns).
{% endhint %}

* In the **Certificate Provider**, **Select Provider** from the drop-down list. The list displays all the created ACME providers. To create a new one, see [<mark style="color:blue;">Create ACME Provider</mark>](https://docs.ionos.com/cloud/security/certificate-manager/dcd-how-tos/create-acme-provider).
* In the **Properties**, configure the following:
  * **Certificate Name:** Enter a name to identify the certificate uniquely.
  * **Common Name:** Enter a common name for the certificate.
  * **Key Algorithm:** From the drop-down list, choose the type of Rivest-Shamir-Adleman (RSA) algorithm for the certificate. RSA is a widely used public-key encryption algorithm for secure data transmission. It generates key pairs and digital signatures.
  * *(Optional)* **Subject Alternative Names:** You can add up to 10 names to the certificate.

![Create Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-9016f81c39f9c59500379a23d3bc6d95540af88b%2Fcertificate-manager-create-auto-certificate.png?alt=media)

{% hint style="info" %}
**Note:** Alternatively, you can also create an auto certificate from **Certificate Manager** page > **ACME Providers** and click **Create Auto Certificate** next to an existing **ACME Provider**. For more information, see [<mark style="color:blue;">Create a Auto Certificate from ACME Providers</mark>](#create-a-auto-certificate-from-acme-providers).
{% endhint %}
{% endtab %}

{% tab title="Import a certificate" %}

* In the **Properties**, configure the following:
  * **Certificate Name:** Enter a name to identify the certificate uniquely.
  * **Certificate:** You can drag or upload a file in the Privacy-Enhanced Mail (PEM) format or enter the content of the certificate file.
  * **Certificate Chain:** Drag or upload a file in the PEM format or enter the content of the certificate file, including the certificate chain, a series of certificates that establish a chain of trust from the end-entity certificate to a trusted root certificate.
  * **Private Key:** Drag or upload a file in the PEM format or enter the content of the certificate file that includes the private key information necessary for decryption and signing.

![Import a Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-7442a45095aa81ecd5845433b3aa906d8782e57c%2Fcertificate-manager-create-import-certificate.png?alt=media)
{% endtab %}
{% endtabs %}

5\. Click **Create** to apply to the certificate configuration.

{% hint style="success" %}
**Result:** Based on the **Certificate type** chosen, the corresponding Certificate is successfully created.
{% endhint %}

## Create a Auto Certificate from ACME Providers

1\. In the **DCD**, go to **Menu** > **Security** > **Certificate Manager**.

2\. In the **Certificate Manager** page, go to **ACME Providers** tab. A list of existing **ACME Providers** are listed.

3\. Click **Create Auto Certificate** against the **ACME Provider** for which you want the certificate to be created.

![Create Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-ea55a38df99b3132bae14907fb5a3f8bc09106b6%2Fcertificate-manager-create-auto-certificate-acme-provider.png?alt=media)

4\. Configure the **Certificate Provider** and **Properties**. For more information, see **Auto certificate** details under [<mark style="color:blue;">Create a Certificate</mark>](https://docs.ionos.com/cloud/security/certificate-manager/dcd-how-tos/create-certificate).

![Configure Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-7728852a4fc32422e126cb7619ff92da67bbedf1%2Fcertificate-manager-configure-auto-certificate.png?alt=media)

5\. Click **Create** to apply to the certificate configuration.

{% hint style="success" %}
**Result:** The **Auto certificate** is successfully created for the selected **ACME Provider**.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ionos.com/cloud/security/certificate-manager/dcd-how-tos/create-certificate.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
