# Long dated webserver certificates for PFC200
**URL:** https://www.wago.community/t/long-dated-webserver-certificates-for-pfc200/2761
**Category:** CODESYS
**Tags:** pfc200
**Created:** [June 13, 2026, 10:09pm UTC](https://www.wago.community/t/long-dated-webserver-certificates-for-pfc200/2761 "2026-06-13T22:09:08Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Justin](https://www.wago.community/u/Justin)
#### Post date: [June 13, 2026, 10:09pm UTC](https://www.wago.community/t/long-dated-webserver-certificates-for-pfc200/2761/1 "2026-06-13T22:09:08Z")
We currently are using the PFC200 with HMI functionality provided via webvisu. I would like the webvisu pages to be served over HTTPS. Everything is set-up and working, but I worry about certficate expiry. Our product once installed can remain in place for 15+ years. At present, the server is using a certifiate provided by Wago, which is due to expire on 1 Feb 2036. I tried to add a self-signed CA key / crt pair via the WBM, but this is not being picked up by the system. Any advice greatly appreciated.
---
### Author:  [@WagoIcard](https://www.wago.community/u/WagoIcard)
#### Post date: [June 15, 2026, 12:35am UTC](https://www.wago.community/t/long-dated-webserver-certificates-for-pfc200/2761/2 "2026-06-15T00:35:09Z")
Hello, the WBM CA/Key is only for the VPN, the certificates for the HTTPs need to be put in another folder with some user access.
Unfortunately i don’t remember where those are …
---
### Author:  [@Justin](https://www.wago.community/u/Justin)
#### Post date: [June 15, 2026, 9:14am UTC](https://www.wago.community/t/long-dated-webserver-certificates-for-pfc200/2761/3 "2026-06-15T09:14:33Z")
I used Claude Code to find an answer to my question. For anyone with the same problem the process involves:
1. Generate self-signed CA private key and certificate (ensure you use extensions as indicated by csr of project webapp)
2. Generate a pem file from the above
3. copy pem file to /etc/lightpd/ on the device
4. Restart the webserver on the device with command /etc/init.d/lighttpd restar