If you bought an SSL certificate from a certificate authority instead of using the free automatic option, you need to install it yourself before your website can use it. This article walks you through installing a certificate you purchased separately, using the certificate signing request (CSR) you generated earlier.
What You'll Need Before You Start
Gather these three items from your certificate authority before you begin:
- The certificate file (usually a .crt file, sometimes sent as text you copy and paste)
- The CA bundle or intermediate certificate (links your certificate back to a trusted root)
- The private key that matches the CSR you generated for this certificate
If you no longer have the private key from when you generated the CSR, you cannot install this certificate. You'll need to generate a new CSR and request a replacement certificate from your certificate authority instead.
Installing the Certificate
In cPanel
- Log in to cPanel and open SSL/TLS under the Security section.
- Click Manage SSL sites.
- Select the domain you're installing the certificate for from the dropdown.
- Paste the contents of your certificate file into the Certificate (CRT) box. cPanel usually auto-fills the private key if it's already stored on the server; if not, paste it into the Private Key (KEY) box.
- Paste the CA bundle into the Certificate Authority Bundle (CABUNDLE) box.
- Click Install Certificate.
In DirectAdmin
- Log in to DirectAdmin and open SSL Certificates under Account Manager.
- Choose Paste a pre-generated certificate and key.
- Paste your private key followed by the certificate into the text box. DirectAdmin expects both in the same field, one after the other.
- If there's a separate field for the CA bundle, paste it there. Otherwise, append it after the certificate in the same box.
- Click Save.
Checking That It Worked
Open your website in a browser using https:// and confirm the padlock icon shows a secure connection with no warnings. You can also run any online SSL checker to confirm the full certificate chain, including the intermediate bundle, installed correctly.
A purchased certificate does not renew itself. Note its expiry date and plan to repeat the CSR and installation process before it lapses, or ask your certificate authority about auto-renewal options.
If you haven't generated your CSR yet, see How to Generate a CSR for Your SSL Certificate first.