How to Install an SSL Certificate in cPanel Step by Step

To install an SSL certificate in cPanel, go to Security → SSL/TLS → Manage SSL Sites, paste your certificate and private key, and click Install Certificate. If your hosting plan includes AutoSSL via Let's Encrypt, the process is even simpler: one click and cPanel handles everything automatically.

Before you start: what you need

Regardless of the certificate type, make sure you have:

• cPanel access for your hosting account.
• The domain pointing to the server (DNS fully propagated).
• For paid certificates: the .crt (certificate), .key (private key), and, if provided by the CA, a ca-bundle (certificate chain) file.

If you need hosting with cPanel included, elenlace.com offers plans with free SSL and automatic renewal from day one.

Option 1: Free AutoSSL (Let's Encrypt built into cPanel)

Most modern hosting providers enable AutoSSL by default. It is the fastest option and requires no external files.

1. Log in to cPanel.
2. Find the Security section and click SSL/TLS.
3. Select AutoSSL Status.
4. Confirm your domain appears in the list. If there is a warning icon next to it, click Run AutoSSL.
5. Wait a few minutes: cPanel will request a certificate from Let's Encrypt, validate domain ownership, and install it automatically.

With AutoSSL active, renewal happens without your involvement 30 days before expiry. As long as the domain keeps pointing to the server, you never have to think about the certificate again.

Option 2: Installing a paid SSL certificate (DV, OV, or EV)

If you purchased a certificate from a commercial CA (Sectigo, DigiCert, GlobalSign, etc.), the process involves a few more steps but remains straightforward.

Step 1 — Generate a Certificate Signing Request (CSR)

1. In cPanel → SSL/TLS → Generate, view, or delete SSL certificate signing requests.
2. Fill in the form: domain, organization, city, country, and email.
3. Click Generate. cPanel creates the CSR and private key at the same time.
4. Copy the CSR block (-----BEGIN CERTIFICATE REQUEST-----) and paste it into your CA's order process.

Step 2 — Validate your domain with the CA

The CA will verify that you control the domain. The most common validation methods are:

• Email: you receive a confirmation link at admin@, webmaster@, or postmaster@yourdomain.
• DNS record: you add a CNAME or TXT record to your DNS zone.
• HTTP file: you upload a text file to a specific path on your site.

Step 3 — Install the certificate in cPanel

Once the CA issues the certificate (minutes for DV, days for OV/EV):

1. Go to cPanel → SSL/TLS → Manage SSL Sites (HTTPS).
2. Find your domain in the list and click Manage.
3. Paste the contents of the .crt file into the Certificate (CRT) field.
4. In the Private Key (KEY) field, cPanel usually auto-fills it. If not, paste it manually.
5. Paste the ca-bundle contents into the Certificate Authority Bundle (CABUNDLE) field.
6. Click Install Certificate.

A confirmation message will appear. Your site now responds over HTTPS.

Forcing HTTPS: redirecting all HTTP traffic

Installing the certificate does not automatically redirect HTTP visitors. You have two options:

From cPanel (easiest)

1. cPanel → Domains → Domains.
2. Toggle the Force HTTPS Redirect switch next to your domain.

Via .htaccess (more control)

Add these lines to the .htaccess file in your site's root:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Use a 301 (permanent) redirect so search engines transfer the SEO value from HTTP URLs to their HTTPS equivalents. Find more SSL best practices in our SSL security section.

Verifying the installation is correct

After installing and enabling the redirect, confirm everything works:

• Open your site in a browser: you should see a closed padlock in the address bar.
• Run SSL Labs (ssllabs.com/ssltest): it grades your configuration from A to F and flags any issues.
• Check for mixed content (images or scripts loaded over HTTP): open Chrome DevTools (F12 → Console) and look for Mixed Content warnings.

Key takeaways

• AutoSSL / Let's Encrypt is the fastest and free option; it is sufficient for the vast majority of websites.
• Paid certificates (OV/EV) are needed when visible organization validation in the browser is required.
• The private key is generated with the CSR; never share it or lose it.
• Including the CABUNDLE (certificate chain) is essential to avoid "authority not recognized" errors.
• Forcing HTTPS with a 301 redirect protects users and consolidates SEO on the secure version.
• Always verify the installation with SSL Labs before considering the job done.

Would you rather have a professional handle it? At elenlace.com we manage SSL installation and renewal so you can focus entirely on your business.

FAQ

How much does an SSL certificate cost in cPanel?

AutoSSL with Let's Encrypt is completely free and included in most cPanel hosting plans. Paid certificates range from a few dollars a year for basic DV to several hundred for EV with extended validation. For most websites, the free certificate is more than sufficient.

Do I need to reinstall the certificate every time it renews?

Not with AutoSSL — cPanel renews and reinstalls the certificate automatically. With paid certificates you will need to repeat the issuance and installation process at expiry, although most CAs send reminder emails weeks in advance.

Does SSL affect my site's loading speed?

The overhead is minimal with TLS 1.3 and virtually imperceptible to end users. In fact, HTTPS enables HTTP/2, which in most cases improves loading speed compared to HTTP/1.1 thanks to request multiplexing.

My certificate is installed but Chrome still shows "Not Secure" — why?

The most likely cause is mixed content: the HTML loads over HTTPS, but some embedded resource (image, script, or iframe) still uses an http:// URL. Use Chrome DevTools to locate the affected resources and update their URLs to HTTPS.

Compare providers

Other providers and guides worth comparing:

• Hostinger
• HubSpot
• IONOS