How to renew an SSL certificate on Heroku

July 2017

Renewing SSL certificates is one of those jobs which I end up researching for half an hour every time I try and do it. These instructions are geared towards SSL on Heroku.

Step 1. Buy a new SSL cert from Namecheap

Step 2. Generate a new key / crt pair

On your local machine, create a new key pair:

openssl req -nodes -new -key server.key -out server.csr

Step 3. Upload the crt to namecheap

Step 4. Download the bundle from namecheap

Step 5. Update the certificate on heroku with the BUNDLE.crt file you just downloaded

heroku certs:update server.crt server.key -a app-name

Step 6. Test SSL with:

Check everything is wired up properly with

curl -kvI

Ever wish you got more email?

Neither do I. You're busy, and so is your inbox. I'll only be in touch when I publish something new. And of course it goes without saying your email will be kept completely private.