Import a certificate identity in macOS Server
If you have files containing an SSL certificate and matching private key, you can import them and then use the certificate to secure services provided by your server.
Import a certificate identity using the Server app
The SSL keys and certificates must be in Privacy Enhanced Mail (PEM) format. If your certificates and keys aren’t in PEM format, you must convert them before importing.
Important: You must have all of the identity files for the certificate identity: the signed certificate, root and intermediate certificates, and keys.
In the Finder, locate the files containing the certificate and matching private key, then put the files where you can see them while using the Server app (for example, on the desktop).
Select Certificates in the Server app sidebar.
Click and choose Show All Certificates.
Click , then choose Import a Certificate Identity from the pop-up menu.
Drag all of the the files containing the certificates and private key to the middle of the dialog.
Click Import. If prompted, enter the passphrase for the private key.