Keeping your certificate up to date ensures that your custom domain works without interruptions. It helps maintain a secure connection and ensures data is collected without issues.

In this guide, you’ll learn how to upload a new certificate for your custom domain.

Before you start

Here are a few things to keep in mind before you update your certificate:

• You need owner permission to access and manage certificates in Menu > Administration > Account > Domains. Read more
• The certificate chain must be in PEM format (with .pem, .crt, or .cer extensions).
• The leaf certificate (your main certificate) has to be listed first in the file.
• The private key must be in PEM format (with .pem or .key extensions), encoded using PKCS#8.
• We’ll notify you when your certificate is about to expire:
  • Email alert: Sent to users with the owner role 30 days before expiration.
  • In-app reminder: Displayed 30 and 7 days before expiration.

Update your certificate

To update an existing certificate, follow these steps:

1. Log in to Piwik PRO.

2. Go to Menu > Administration.

3. Navigate to Account.

4. In the Domains section, find the Domains list.

5. Find your custom domain, and click the three-dot ⋯ icon next to its name.

6. Select Add a new certificate.

7. A window will appear where you need to upload the certificate chain and the private key.

8. Click Save. 

9. That’s it! The certificate has been updated. You can check its status in the Domains list.

Reminders and alerts

Keeping your certificate updated helps ensure uninterrupted data collection and proper operation of your custom domain. We’ll alert you when a certificate is about to expire:

• Email alert: The user with the owner role will receive an email alert 30 days before any certificate expires.
• In-app reminders: All users will see an in-app overlay 30 days before a certificate expires, followed by a final reminder 7 days before expiration.