Local generated private key pem file with private key stays at /etc/ssl/private/some_key.pem downloaded files sub.domain.tld.crt file - public goes to /etc/ssl/certs gd_bundle.rt - /etc/ssl/certs installation cat sub.domain.tld.crt gd_bundle.rt > chain-domain.tld.crt cp chain-domain.tld.crt /etc/ssl/certs