ThisCalculator

Everyday

Can You Move a Bluehost SSL Certificate to Another Host?

Updated · Standard formula, shown below

Can You Move a Bluehost SSL Certificate to Another Host?

Yes, you can usually move a Bluehost SSL certificate to another hosting provider if you have the certificate’s private key and the certificate files, and the certificate is valid for the domain. If you cannot export the private key, or the new host will not accept the certificate type, you will generally need to issue a replacement certificate instead.

What “moving” an SSL certificate means

An SSL certificate is not a setting that travels with a website. It is a set of cryptographic files installed on a web server so browsers can establish an encrypted HTTPS connection and verify that the certificate covers the requested domain. The certificate itself is issued for names such as example.com or www.example.com; it is not inherently tied to Bluehost’s hosting account. However, its private key is essential, and the host must be able to install and use the certificate and key.

People may mean two different things by “move”: installing the existing certificate on a different server, or switching hosting providers and setting up HTTPS there. The first requires the matching private key and certificate chain. The second can often be done by obtaining a new certificate from the new host or another certificate authority. In either case, the domain’s DNS must direct visitors to the server where the site is being served.

What you need before transferring it

Check what files or export options you have before changing hosting. A typical installation needs the domain certificate, its matching private key, and any required intermediate certificate chain. Hosts may request these as separate files or as a combined bundle, and their labels and accepted formats vary.

  • Certificate: Often a .crt or .pem file. It must be within its validity period and cover the domain names visitors use.
  • Private key: Commonly a .key or .pem file. It must match the certificate. Treat it as a secret; do not send it through an untrusted channel or publish it.
  • Certificate chain: Intermediate certificates that help browsers verify the certificate. Some providers supply or install this separately.
  • Domain control: You need access to the domain’s DNS or another method of proving control if you request a new certificate.

Do not assume that a certificate shown as active in a Bluehost account can necessarily be downloaded with its private key. Availability depends on how it was issued and managed, and account interfaces and product arrangements can change. Check Bluehost’s current documentation or support for the particular certificate and account. If the key is not exportable, the existing certificate cannot simply be recreated from the public certificate file: the safe practical option is to obtain a new certificate with a new key.

How to move it to another host

Start by asking the destination host whether it accepts customer-supplied certificates and what exact files, formats, and installation steps it requires. Some hosting services manage certificates automatically and do not provide a way to install an external one. If manual installation is supported, proceed in this order:

  1. Confirm the certificate’s names and expiry. Make sure it covers every hostname you need, for example both example.com and www.example.com if both are used.
  2. Obtain the certificate, matching private key, and chain. Verify that the files are complete. Never substitute a key from another certificate.
  3. Configure the new host. Use its control panel or support instructions to install the files for the correct site or server configuration. Do not paste private-key contents into a public ticket or unsecured form.
  4. Point the domain to the new host when ready. Update the relevant DNS records according to the new provider’s instructions. DNS changes can take time to be seen everywhere, so keep the old hosting account available during the transition if possible.
  5. Test HTTPS and redirects. Visit the site using https://, check the certificate details and test important pages, including images, scripts, and forms. Configure HTTP-to-HTTPS redirection only after the secure version works.

If the new host cannot accept the old certificate, request one through its certificate-management feature or obtain one from a certificate authority that supports your needs. Complete the required domain validation, install the replacement, and then test it before cancelling the old hosting service.

When reissuing is the better choice

A new certificate is often simpler than trying to transfer an old one. This is especially true when Bluehost controls the private key, the certificate is close to expiry, or the destination host offers automatic certificate issuance and renewal. A replacement certificate can be issued for the same domain, but the new server still needs to complete domain validation and have the certificate installed correctly.

Reissuing generally means creating a new key pair and obtaining a new certificate, rather than moving the old key. After the new certificate is active, verify the site over HTTPS and confirm that renewal is configured. Certificate renewal is important: a certificate does not remain valid indefinitely, and an expired certificate causes browser warnings even if the website files and DNS are otherwise correct.

Common problems and safe checks

  • Private key missing or mismatched: The server cannot use a certificate without its corresponding private key. Find the original key through the account or provider that generated it, or reissue the certificate.
  • Incomplete chain: A missing intermediate certificate can cause some browsers or devices to report trust problems. Ask the new host whether it installs the chain automatically or needs a separate chain file.
  • Certificate covers the wrong hostname: A certificate for www.example.com may not cover example.com unless both names are listed or covered by a suitable wildcard certificate. Check the names in the certificate, not just the website’s appearance.
  • DNS still points to the old server: Installing a certificate on the new host will not make visitors reach it until DNS directs them there. Confirm the domain’s records with the DNS provider.
  • Mixed content or redirect loops: A page can load over HTTPS while still requesting images or scripts over HTTP. Update site URLs and investigate conflicting redirect rules if the browser reports warnings or the page repeatedly redirects.

Keep private keys confidential and restrict access to them. If you believe a key has been exposed, contact the certificate issuer or hosting provider about revocation and replacement; changing the website’s password does not replace a compromised certificate key.

Frequently Asked Questions

Can I use my Bluehost SSL certificate on another hosting company?
Usually, if you have the certificate, its matching private key, and any required chain, and the destination host supports manual installation. If the key is unavailable or the host manages certificates exclusively, get a new certificate instead.

Can I transfer an SSL certificate without the private key?
No. The certificate’s public file does not let you recover its private key. Without the matching key, you cannot install that certificate as a working pair on the new server; request a replacement certificate.

Will changing hosts make my website lose HTTPS?
It can temporarily, if the new server has no valid certificate or DNS points visitors to it before HTTPS is ready. Install and test the certificate on the destination host before completing the DNS switch when your setup allows it.

Do I need to change DNS to move an SSL certificate?
DNS does not transfer the certificate, but it determines which server visitors reach. Update DNS as part of the hosting move, following the new host’s instructions, and allow for DNS caching and propagation.

Can I keep the same certificate when I change my domain name?
Only if the certificate already covers the new hostname. Otherwise, obtain a certificate that includes the new name. A certificate for one domain does not automatically secure a different domain.

Is a Bluehost SSL certificate tied to the Bluehost account?
The certificate is issued for specified domain names, but access to its private key and the ability to export it may depend on how Bluehost issued and manages it. Check the specific certificate’s export options with Bluehost.

Related

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.