1. Purchase the certificate

2.Generate CSR from your server

https://help.comodosslstore.com/support/solutions/articles/22000218709--apache-openssl Apache OpenSSL : ComodoSSLStore

3. Create an ssl folder to hold the certificates

mkdir /document_root/.ssl -p

cd <document_root>/.ssl

4. Generate your certificate key

openssl req -new -newkey rsa:2048 -nodes -keyout ki-server.key -out ki-server.csr

5. Configure your order with CSR by pasting the output from the keyfile into the form

Go to the email and find the configure link

6. Validate your domain using the DNS option

7Get the certificate issued from the email for the SSL Certificate , root and bundle intermediates

8. Scp the files over

scp i “keyfile” *.zip <hostname>:<document_root>/.ssl

9. Unzip the zip file

10. Merge the root and intermediate bundles certificates into one

cat * > bundle_root_merge.crt

11.  Setup the vmhost file

<VirtualHost *:443>

    DocumentRoot /var/www/html/knowledgeinstruments.com/public_html

    ServerName www.knowledgeinstruments.com

    SSLEngine on

    SSLCertificateFile /var/www/html/knowledgeinstruments.com/.ssl/knowledgeinstruments_com.crt

    SSLCertificateKeyFile /var/www/html/knowledgeinstruments.com/.ssl/ki-server.key

    SSLCertificateChainFile /var/www/html/knowledgeinstruments.com/.ssl/ki_bundle.crt

</VirtualHost>

12. Install mod_ssl module

sudo yum install mod_ssl

13. Restart apache

service httpd restart

14. Check that SSL is enabled

https://comodosslstore.com/ssltools/ssl-checker.php#results

Comodo SSL Checker - SSL/TLS Certificates Checker Tool (comodosslstore.com)

Addition Resources;

https://help.comodosslstore.com/support/solutions/articles/22000218775-apache-open-ssl Apache Open SSL : ComodoSSLStore

>>Defaults the website to https;

https://help.one.com/hc/en-us/articles/115005587469-How-do-I-force-visitors-of-my-site-to-always-use-HTTPS- How do I force visitors of my site to always use HTTPS? – Support | one.com

Please refer to this for CSR generation help: https://help.configuressl.com/apache-openssl/