Child pages
  • Install an SSL Certificate on the Domain
Skip to end of metadata
Go to start of metadata

This document is for a previous release of cPanel & WHM. To view our latest documentation, visit our Home page.

For cPanel & WHM 11.40


(Home >> SSL/TLS >> Install an SSL Certificate on a Domain)

Overview

You can use the Install an SSL Certificate on a Domain feature to install a certificate on your domain. Before you can use this feature, you must create or purchase a certificate, and also must have the certificate's key.

Previously, each SSL certificate required its own dedicated IP address. Server Name Indication (SNI) allows a server to have multiple certificates installed to the same IP address. If your operating system does not support SNI, you can also use a multi-domain certificate or a wildcard certificate.

  • Multi-domain (UCC/SAN) certificates may be installed on multiple domains that share the same IP address and match the certificate's domains list.
  • Wildcard certificates allow you to secure a domain and an unlimited number of subdomains.
    • For example, if you wished to secure store.example.com and blog.example.com, you can use a single wildcard certificate to do so.

For more information about SSL certificate types, read our SSL documentation.

Important

When you install a certificate, the Install an SSL Certificate on a Domain feature indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers. Self-signed certificates also generate security warnings in your users’ web browsers. You should only install a self-signed certificate temporarily until you can replace the certificate with a certificate from a valid certificate authority.


Install an SSL Certificate on a Domain

When you install a certificate on a domain, you can use the Browse Certificates or Autofill by Domain features to retrieve information. You can also choose to enter the information manually.

Browse Certificates

To retrieve information with Browse Certificates:

  1. Click Browse Certificates. The SSL Certificate List window will appear.
  2. You can either select an account from the Browse Account menu or click Browse Apache. The list of certificates will change.

    Note

    The listed certificates correspond to the selected account. This menu does not indicate that the selected certificate will be installed to the selected account.

  3. Click the option that corresponds to the desired certificate.
  4. Click Use Certificate to populate the available fields.
    • If the selected domain is not dedicated to a specific IP ad dress, select an available IP add ress from the IP Address menu. You can only select an IP address that is labeled as shared or available.
    • If you selected a purchased SSL certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If this field is not already populated with information, you may need to contact the organization from which you purchased the certificate.
  5. Click Install.
    • You can click Reset to remove the information from all fields.

If the installation is successful, WHM will display a message to indicate that the certificate was installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem. More information is available about how to troubleshoot an SSL installation.

Autofill by Domain

To enter the domain name and populate the fields automatically:

  1. Enter your domain in the Domain field.
    • If you have multiple certificates associated with the same domain, the server will attempt to choose the best certificate. To select the correct certificate and avoid potential issues, use Browse Certificates and follow the steps in the section above.
  2. When you enter the complete domain name, the Autofill by Domain option will appear next to the Domain field. Click Autofill by Domain.
    • If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. You can only select an IP address that is labeled as shared or as available.
    • If you selected a purchased SSL certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If this field is not already populated with information, contact the organization from which you purchased the certificate.
  3. Click Install.
    • Click Reset to remove the information from all fields.

If the installation is successful, WHM will display a message to indicate that the certificate installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem. More information is available about how to troubleshoot an SSL installation.

Manually enter information

To manually enter all of the information for your certificate:

  1. Enter your domain in the Domain field.
    • When you enter the complete domain name, the Autofill by Domain option will appear next to the Domain field. If you wish to continue to enter information manually, do not click Autofill by Domain.
  2. If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. You can only select an IP address that is labeled as shared or available.
  3. In the Certificate field, copy and paste the entire contents of your certificate's .crt file.
  4. In the Private Key field, copy and paste the entire contents of your certificate's .key file.
  5. If you chose to install a purchased certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If you do not have the information, contact the organization from which you purchased the certificate.
  6. Click Install.
    • You can click Reset to remove the information from all fields.

If the installation is successful, WHM will display a message to indicate that the certificate installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem. More information about how to troubleshoot an SSL installation is available.