If you bought an SSL certificate from a certificate authority instead of using a free automatic one, you'll need to install it manually on your hosting account. This means uploading three pieces: the certificate itself, your private key, and the CA bundle (also called an intermediate certificate) that the certificate authority provided. Here's how to do it in cPanel and DirectAdmin.
Before you start, make sure you have all three files ready: the certificate (.crt), the private key (.key), and the CA bundle (.ca-bundle or intermediate certificate) from your certificate authority. If you generated your CSR on your hosting account, see this guide for a refresher on where that private key came from.
In cPanel
- Log in to cPanel and open SSL/TLS under the Security section.
- Click Manage SSL Sites under "Install and Manage SSL for your site".
- Select the domain you're installing the certificate for from the dropdown.
- Paste the contents of your certificate file into the Certificate: (CRT) box. If cPanel already recognizes the domain and key, it may autofill some fields for you.
- Paste your private key into the Private Key (KEY) box if it isn't already filled in.
- Paste the CA bundle into the Certificate Authority Bundle: (CABUNDLE) box.
- Click Install Certificate.
In DirectAdmin
- Log in to DirectAdmin and open SSL Certificates under the Account Manager or Advanced Features section.
- Choose the domain you want to secure.
- Select Paste a pre-generated certificate and key.
- Paste your certificate, private key, and CA bundle into the combined certificate box, one after another in that order.
- Click Save to install the certificate.
Once installed, your website should show a secure padlock right away since there's no propagation delay involved. SSL certificates take effect as soon as the web server reloads, which usually happens immediately after you save.
If your browser still shows a warning after installing, double-check that the private key matches the certificate you installed, and that you included the full CA bundle. A missing or incomplete CA bundle is the most common cause of "not fully secure" warnings even after a successful installation.
Renewing your certificate
Paid SSL certificates typically need manual renewal every one to two years, depending on what you purchased. When your current certificate is close to expiring, your certificate authority will usually email you a new set of certificate and key files. Repeat the steps above with the new files to install the replacement before the old one expires, so your website doesn't show a security warning in the meantime.