How to Replace an Expired Pi-hole SSL Certificate

Published 07/06/2026

Description

In this video, I show you how to replace an expired Pi-hole SSL certificate using an internal certificate authority, OpenSSL, and a few simple file conversions. If your Pi-hole web interface shows a certificate warning or your HTTPS access has stopped working, this step-by-step guide walks you through the full renewal process. Contents: 0:00 - Introduction 0:12 - Description 0:53 - The Problem 1:46 - Prepare Certificate 4:47 - Prepare Pihole Certificates 6:35 - WinSCP 7:00 - Putty 7:58 - Restart 8:28 - Troubleshooting 9:58 - Conclusion You’ll learn how to export your certificate from an Active Directory Certificate Authority AD CSAD CS, convert a PFX file into the required PEM, CRT, and key files with OpenSSL, and prepare the correct files for Pi-hole on Ubuntu/Linux. I also show how to copy the new TLS files to your Pi-hole server, restart the Pi-hole FTL service, and verify that everything is working correctly. This tutorial is useful if you run Pi-hole in a homelab, self-hosted environment, or business network with your own internal PKI. It is especially helpful if you use Microsoft Active Directory Certificate Services and need to renew or replace certificates manually on Linux-based services. If you are working with Pi-hole, internal SSL certificates, OpenSSL, Ubuntu, Linux, or homelab infrastructure, this video should save you time the next time your certificate expires. If this helped you, don’t forget to like, subscribe, and leave a comment with your setup or questions. #PiHole #OpenSSL #Homelab Follow me on X: https://l.samayas.eu/jo3eaYEf3E?P=YT&V=127 Buy me a Coffee : https://l.samayas.eu/jX6xL7EWhd?P=YT&V=127 Studio Equipment Camera Sony Alpha ZV-E10 II: https://l.samayas.eu/k7y95TREl0?P=YT&V=127 Secondary Camera Obsbot Tail Air: https://l.samayas.eu/iFQu9WfmCw?P=YT&V=127 Elgato Prompter: https://l.samayas.eu/fHVrqqXtSc?P=YT&V=127 Microphone Rode Wireless GO II: https://l.samayas.eu/afBINjiBXN?P=YT&V=127