...
Generate and download the CSR to get it signed by your chosen Certificate Authority (CA).
...
Ensure the signed certificate is in PEM format (Base-64 encoded X.509 - CER).
Navigate to the System > Certificate Management page in ZPC and the Import Certificate tab and select the Signed Certificate option.
Renewing an Existing Certificate
...