How to Install a SSL Certificate in cPanel Print

If you’ve purchased an SSL certificate from a third-party provider (such as Sectigo, DigiCert, or GoDaddy), you can install it directly onto your hosting account using cPanel’s built-in SSL/TLS Manager. This guide walks you through the process step by step.

Step 1: Gather Your SSL Files

Your certificate provider will usually give you:

• Certificate File (.crt) – the main SSL certificate.
• CA Bundle / Intermediate Certificates – a chain file that links your SSL to the certificate authority.
• Private Key (.key) – generated when you created the CSR (Certificate Signing Request) in cPanel.

Tip: If you generated the CSR in cPanel originally, the private key is already stored in your account.

Step 2: Log in to cPanel

1. Log in to your cPanel account.
2. Scroll down to the Security section.
3. Click on SSL/TLS or SSL/TLS Manager (the exact label may vary).

Step 3: Open the Install SSL Tool

1. Under Install and Manage SSL for your site (HTTPS), click Manage SSL sites or Certificates (CRT).
2. Select the domain you want to secure from the drop-down list.

Step 4: Paste or Upload Your SSL Certificate

1. In the Certificate (CRT) box, paste the contents of your certificate file, or use the Upload option if available.
2. cPanel should auto-detect and match the Private Key if you generated the CSR here. If not, paste it into the Private Key (KEY) field.
3. Paste the CA Bundle (CABUNDLE) into the final box. Your SSL provider usually supplies this.

Step 5: Install the Certificate

1. Click Install Certificate.
2. You should see a confirmation message that the SSL was successfully installed.

Step 6: Test Your SSL

Once installed:

• Visit your website with https:// to confirm the SSL is working.
• You can also test your SSL at SSL Labs Server Test or your certificate provider’s checker.

Troubleshooting

• If you see an error like “Private Key does not match Certificate,” ensure you are using the correct pair of files from the same CSR.
• If your site shows “insecure” warnings, double-check the CA Bundle is installed.
• For wildcard SSLs, confirm you selected the correct domain format (e.g. *.example.com).

That’s it! Your site should now be secured with your new SSL certificate.