Model: ZD1200 Version: 9.12.3.0 build 75
Prepare 3 key file from
https://www.sslforfree.com/1.ca_bundle.crt
2.certificate.crt
3. private.key
Go to Configure , Certificate
Go to Add a trusted CA and import "ca_bundle.crt".
Go to Import Signed Certificate and import "certificate.crt".
if certificate.crt is fine, you will be asked to import the "private.key" and reboot.
If you are using 2 ZoneDirector for HA, then you need to do it in both sides.