Can't access ISPConfig Admin

Hello,
I am new to this forum, but it helped me a lot with my own server configuration.
But I haven't found a solution to my problem:

I bought an SSL Cert (AlpiroSSL) for my domain, successfully installed it and it is working on my domain e.g. domain.com.
But now I am not able to access my ISPConfig Admin on 1.2.3.4:8080. I have to change ispconfig.vhost from <VirtualHost *:8080> to <VirtualHost *:443> - then I can access ISP Admin (1.2.3.4:443) , however, my website "goes down" with "NET::ERR_CERT_AUTHORITY_INVALID"
I am not sure how to config apache to access both sites, the best option will be like:
admin.domain.com = ISPConfig Admin (or something similar, I think additional Len's Crypt SLL will be necessary...)
domain.com = my website

//Also I am using HSTS - maybe this is the issue?

I understand that with port change (8080→443) I am "stealing" HTTPS traffic from my main website (domain.com) and therefore is not accessible. I hope there is a proper solution to this.

Could you help me, please?

 

Did you add the cert to the ispconfig-vhost? You can store the cert and key into the files in /usr/local/ispconfig/interface/ssl

 

Hi, now I did. Rebooted apache2. But with no result.
Which port should I use to access ISPConfig Admin now? Should I change IP/port settings in isp-config.vhost?

On 1.2.3.4:8080 I receive ERR_CONNECTION_REFUSED
w/o https I got ERR_CONNECTION_TIMED_OUT, which is understandable

Thank you

//I did it like:

[...]
# SSL Configuration
SSLEngine On
SSLCertificateFile /usr/local/ispconfig/interface/ssl/myPurchasedCert.crt
SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/myGenerated.key
## must be re-added after an ISPConfig update!!!
SSLCertificateChainFile /usr/local/ispconfig/interface/ssl/myPurchasedIntermediate.crt
[...]

 

Anybody knows, please?

 

Thank you very much!
I can reach ISPConfig administration NOW!

I have to set port to 1.2.3.4:80 and ServerName + ServerAlias
(and I can access ISPConfig on "domain.com:80" - fully covered under SSL)

Thank you very much!

 

-- SOLVED --
Changed ispconfig.vhost -- now i can access my ISPConfig admin via domain.com:8080 (even on https)

Code:

Listen 8080
NameVirtualHost *:8080

<VirtualHost *:8080>