Security and SSL
SSL/TLS in cPanel: which tool you need
cPanel has tools for checking automatic coverage and others for installing external certificates. Choose the right one before generating keys or buying a certificate.
| Need | Tool |
|---|---|
| See whether a name has a certificate and why AutoSSL fails | SSL/TLS Status |
| Prepare a request for a certificate authority | SSL/TLS > Certificate Signing Requests (CSR) |
| Manage the corresponding key | SSL/TLS > Private Keys (KEY) |
| Upload a certificate you have received | SSL/TLS > Certificates (CRT) |
| Associate it with the site so it is served | Install and Manage SSL for your site (HTTPS) |
From cPanel 134, the server may group these screens under SSL/TLS Certificates. Not all versions show the same AutoSSL run or exclude buttons. If you cannot find an action you need, tell us the affected name and the status shown. cPanel documentation.
Automatic or external certificate
Before ordering one, check whether the account's automatic coverage meets your needs. AutoSSL depends on names being eligible and passing validation; issuance is not guaranteed for every domain.
If you need a specific authority or type, follow the installation of an external certificate. Uploading a CRT is not the same as installing it, and ordering or renewing a product does not prove which certificate the website serves.
What you should keep
The private key is confidential and must match the certificate. Do not publish it on the website or paste it into external checkers. If you lose it, request a reissue with a new key. Also keep the certificate, its chain and a note of who must renew it.
After installing, test the names you need over HTTPS. Only then configure the application and the redirect from HTTP.
You may also find useful
- AutoSSL notice: the renewal may reduce coverage Explains the reduction of coverage notice, how to find the domain that fails validation and when to...
- Install an external SSL certificate in cPanel Walks you through generating a CSR, obtaining an external certificate and installing it in cPanel wi...
- Automatic SSL certificates for domains and subdomains Check AutoSSL's free coverage and enable HTTPS on your website once the certificate is valid.
- Diagnose an invalid SSL certificate Tell apart a wrong name, expiry and the chain of trust; check the DNS destination and the AutoSSL st...
Something wrong or out of date? Tell us and we will review it.