For cPanel & WHM 11.44
(Home >> SSL/TLS >> Install an SSL Certificate on a Domain)
Use this interface to install a certificate on your domain. Before you can use this feature, you must create or purchase a certificate, and also must have the certificate's key.
When you install a certificate, this interface indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers, and generate security warnings in your users’ web browsers. You should only install a self-signed certificate temporarily, until you can replace the certificate with a certificate from a valid certificate authority.
SNI and multiple certificates
Server Name Indication (SNI) allows a server to have multiple certificates installed to the same IP address. If your operating system does not support SNI, you can also use a multi-domain certificate or a wildcard certificate.
- Multi-domain (UCC/SAN) certificates allow you to secure multiple domains that share the same IP address and match the certificate's domains list.
- Wildcard certificates allow you to secure a domain and an unlimited number of subdomains. For example, to secure
blog.example.com, use a single wildcard certificate.
For more information, read our SSL FAQ and Troubleshooting documentation.
Install an SSL certificate
Use either of the following methods to install certificates on your server.
If the installation is successful, WHM displays a message to indicate that the certificate was installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem.
To find and select a certificate on your server, and install it, perform the following steps:
- Click Browse Certificates. The SSL Certificate List window will appear.
Select an account from the Browse Account menu, or click Browse Apache.
The listed certificates correspond to the selected account. This menu does not indicate that the system will install the selected certificate to the selected account.
- Select the desired certificate.
- Click Use Certificate. The system will automatically populate the text boxes.
If the selected domain is not dedicated to a specific IP ad dress, select an available IP add ress from the IP Address menu.
You may only select IP addresses that the menu labels as shared or available.
- If you selected a purchased SSL certificate, you may need to fill in the Certificate Authority Bundle (optional) text box. If this text box is not already populated with information, contact the organization from which you purchased the certificate.
- Click Install.
Install by the certificate's domain
To use the associated domain to find and install the certificate, perform the following steps:
Enter your domain in the Domain text box. The Autofill by Domain option will appear.
- Enter the remaining certificate information in the appropriate text boxes.
To have the system populate the certificate information for you, click Autofill by Domain.
If you have multiple certificates for the same domain, the server will attempt to choose the best certificate. To avoid potential issues, you may wish to use the Browse Certificates method described above.
- If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. The system labels available IP addresses as shared or as available.
- If you selected a purchased SSL certificate, you may need to enter information in the Certificate Authority Bundle (optional) text box. If this text box is not already populated with information, contact the organization from which you purchased the certificate.
- Click Install.