Install the issued certificate in the cPanel account serving the website, using its matching private key and the issuer's current intermediate chain. Verify the certificate visitors receive after installation.
IN THIS ARTICLE
01 Install and test
- Confirm that issuance is complete and download the files for the relevant server format. Check the hostname coverage, validity and order reference.
- Open SSL/TLS Certificates > Installation in the unified cPanel interface. In the standalone layout, open SSL/TLS and Manage SSL sites.
- Select the correct domain. Paste or select the issued certificate and use the matching key from the account. Provide the current CA bundle when the interface requires it.
- Review the names and installation destination before selecting Install Certificate. Address any key mismatch or incomplete-chain error.
- Open the public HTTPS hostname and inspect the served certificate's serial number and expiry. Test every required name, including
wwwwhere used. - If a CDN or firewall terminates public HTTPS, check its certificate separately. Record how this manually installed certificate will be renewed.
02 Example: confirm the installed certificate matches the website
Before installation, compare the certificate's covered names with the hostname customers will use. A certificate for one address does not automatically cover every subdomain or a differently spelled alias.
Install the issued certificate with its matching private key and the appropriate intermediate chain through the supported cPanel interface. Keep a record of the existing installation and a recovery route before replacing a working certificate.
What should I test after installation?
Open the public HTTPS hostname and inspect the certificate served to the browser. Check its names, validity period and trust chain. Repeat for important aliases such as the apex and www hostname where both are used. If a CDN is in front of the site, distinguish its visitor-facing certificate from the certificate installed on our origin server.
A valid certificate does not fix mixed content or an application's incorrect redirects automatically. Test images, scripts, login and forms after the browser accepts the certificate. Contact us with the domain, certificate-order reference and visible error if installation fails. Never put the private key in a public page, shared screenshot or ordinary unprotected message.
Common questions
Why does uploading the certificate not change my site?
Storing a certificate and installing it for a site are separate operations. Confirm the active installation and whether a proxy or another server is answering the public request.
Should I delete the old key first?
Keep recovery options until the replacement is working, unless a compromise requires urgent handling. Deleting keys indiscriminately can affect other certificates.
Will AutoSSL renew this paid certificate?
Do not assume a manually installed commercial certificate is enrolled in AutoSSL renewal. Confirm the actual automation and order-renewal process, and monitor the public expiry.