...

Overview

The domain address customization is the change of a domain name for your TurnKey Lender instance (the default domain name is [company-name].turnkey-lender.com. To change it, send a rather common update of the TurnKey Lender instance, which, however, requires some configuration-level changes. On your side, you need to contact your TurnKey Lender account manager, provide a .pfx version of the SSL certificate in *.pfx format for the domain you would like to use, and then, on your side, point that domain to the server IP , which will be provided from our sideprovided by TurnKey.

Obtaining an SSL Certificate

While the procedure may differ subject to a specific domain, the basic flow is:

1. Generate a Private Key and CSR (Certificate Signing Request).

This can be done using OpenSSL or a similar tool. Here's how you can generate them using OpenSSL:

# Generate a new private key 
openssl genrsa -out mydomain.key 2048
 
# Generate a CSR using the private key 
openssl req -new -key mydomain.key -out mydomain.csr

You'll need to fill in additional information like your domain name, organization, city, etc. generating the CSR.

2. Purchase the Certificate

Submit the CSR to a certificate authority (CA) like Let's Encrypt, Comodo, DigiCert, etc. The CA will validate your domain ownership and issue the certificate. Most CAs provide instructions on how to submit your CSR.

3. Download Your Certificate

Once your SSL certificate is issued, you will typically receive it via email, or you can download it from the CA's portal. Usually, you'll receive several files including your domain certificate (mydomain.crt) and the CA's intermediate certificates.

4. Create a .pfx File

After obtaining your certificate and any necessary intermediate and root certificates, you can combine them with your private key into a .pfx file. Again, you can use OpenSSL to do this:

# Combine your private key and certificates, and the CA's intermediate certificates into a .pfx file 
openssl pkcs12 -export -out mydomain.pfx -inkey mydomain.key -in mydomain.crt -certfile CA_Intermediate.crt

You'll be prompted to create a password for the .pfx file, which is required to import the certificate.