0. Install OpenSSL from https://slproweb.com/products/Win32OpenSSL.html, download the x64 and exe 1. Generate private Key and CSR, run it on openssl bin folder if u want to generate with password - openssl genpkey -algorithm RSA -out server.key -pkeyopt rsa_keygen_bits:2048 - a key will appear - openssl req -new -key server.key -out server.csr - it will promtp and ask for if u want to generate without password -openssl req -new -newkey rsa:2048 -nodes -out evantage-app_com_my.csr -keyout evantage-app_com_my.key -subj "/C=MY/ST=Selangor/L=Kota Kemuning/O=Evantage Solutions/OU=IT/CN=evantage-app.com.my" - key and csr will appear together 2. Send to SSL provider exabytes, exabytes will send to SSL provider 3. SSL provider will send email back to email register 4. Combine all certificates into fullchain.pem, must in sequence - type evantage-app_com_my.crt SectigoRSADomainValidationSecureServerCA.crt USERTrustRSAAAACA.crt AAACertificateServices.crt > fullchain.pem 5. Export the pfx openssl pkcs12 -export -out certificate.pfx -inkey evantage-app_com_my.key -in evantage-app_com_my.crt -certfile fullchain.pem 6. Go to TSPLUS, install the HTTPS sertificate, key in the password or no password to proceed.