Move an SSL certificate to cPanel

As a rule you will not need to import a certificate: AutoSSL tries to provide automatic, free coverage for the account's eligible names. Check its status in SSL/TLS Status before moving a private key.

However, there may be situations where you prefer to use your own SSL, especially in business environments with specific specifications and requirements. In that case, you will probably need to export the SSL certificate from your current provider and import it when you move to our services.

Get the files from the previous provider

You need the certificate, the private key that matches that certificate exactly and, if the authority provides it, the intermediate chain or CA Bundle. Do not share the key or upload it to external checking services.

1. Log in to your current hosting provider's control panel.
2. Go to the SSL/TLS section.
3. Select "Private Keys (KEY)". If you cannot see your private key, you will probably need to contact your web hosting provider.
4. Get the corresponding key using the download option or by copying the PEM block that panel offers. Do not confuse a key with the certificate.
5. Repeat the process for the "Certificate (CRT)" section.

You should now have at least the certificate (.crt) and its private key (.key). Also keep the CA Bundle and check that the certificate includes all the names you need.

Import and install in cPanel

1. Log in to your cPanel account.
2. Go to 'Security' > 'SSL/TLS'.
3. Under 'Private Keys (KEY)', click 'Upload KEY'. This opens a new page where you can upload the private key you got from your old hosting provider.
4. Go back to SSL/TLS and under 'Certificates (CRT)', click 'Upload CRT'. Upload the saved certificate you exported from the previous hosting platform.

To install the new certificate and private key on a specific website:

1. In cPanel, go to 'Security' > 'SSL/TLS' > 'Install and Manage SSL for your site (HTTPS)'.
2. Select the domain on which you want to install the certificate.
3. The system will try to fill in Certificate (CRT), Private Key (KEY) and possibly CA Bundle (CABUNDLE). Confirm that the key matches the certificate and use only the chain provided for that issuance.
4. Click 'Install Certificate'.

Check that cPanel confirms the installation, not just the upload of the files.

Once installed, access the site via HTTPS and check in the browser the name covered, the issuer, the chain and the expiry date. Never paste the private key into a checking tool.

Depending on your hosting provider, the availability of and access to the certificate and private key may vary. If you run into any problem, we recommend contacting the technical support of the provider you are trying to export the certificate from.

An imported certificate may be left out of automatic renewal. Note down who must renew it and securely keep the materials needed to reinstall it.

If you cannot get the private key, you cannot rebuild it from the certificate or the CSR. Generate a new request and ask the authority for a reissue. If you suspect the key was exposed, use a new key and request revocation of the affected issuance.

Before cancelling the previous provider, confirm that the new server presents the expected certificate for each name. Keep a protected copy of the files outside the website's public directory.