You can upload third-party certificates to the SSL Certificates Service console for centralized management.
Background
In the SSL Certificates Service console, you can upload only the PEM-encoded CA certificate files and private key files. If your CA certificate files or private key files are not PEM-encoded, convert them to PEM-encoded files before you upload the files. The CA certificate files support the PEM and CRT formats. The private key files support the KEY format. For more information about how to convert files, see Certificate format conversion.
Note The certificates that you upload in the SSL Certificates Service console cannot be
downloaded.