Page tree
Skip to end of metadata
Go to start of metadata

This document is for a previous release of cPanel & WHM. To view our latest documentation, visit our Home page.

For cPanel & WHM 11.46

(Home >> SSL/TLS >> Generate an SSL Certificate and Signing Request)


This interface allows you to simultaneously generate both a self-signed SSL certificate and a Certificate Signing Request (CSR) for a domain. You can also use this feature to generate a private key, which is essential for self-signed certificates and purchased certificates.

If you wish to purchase a certificate, submit a CSR to your chosen certificate authority. They will send you a certificate via email in a .zip file.

For more information, read our Purchase and Install an SSL Certificate documentation.

Contact Information

This section of the interface allows you to specify a contact email address at which you wish to receive a copy of your SSL certificate, private key, and CSR.

To receive the SSL certificate, private key, and CSR in an email, enter your preferred email address in the Email Address text box and select the When complete, email me the certificate, key, and CSR checkbox.


Do not email the private key if your email service provider does not support secure mail via SSL/TLS.

Private Key Options

This section of the interface allows you to set the size of your SSL certificate and CSR's private key.

Select the key size from the Key Size: menu. We recommend that you select 2,048 bits.

Certificate information

This section of the interface allows you to enter the information that they system will use to create a self-signed SSL certificate, CSR, and a new private key.

To generate an SSL certificate, CSR and private key, enter your domain and server information in the appropriate text boxes.



  • Some certificate authorities may not accept special characters in the Company and Company Division text box. If your company name includes symbols other than a period or a comma, confirm that your certificate authority will accept them.
  • The Company Division text box is optional.

Shared secrets

This section of the interface allows you to specify a passphrase for your CSR.  Some certificate authorities require passphrases for CSRs in order to confirm the identity of the person or organization with whom you wish to communicate.


The system stores all passphrases unencrypted.  Exercise caution when you specify a passphrase.

Enter a passphrase in the Passphrase: text box and click Create. WHM will display the CSR with its SSL certificate and private key.

After the system creates the certificates, copy and paste these items in the correct directories.

  • If you provided an email address, the system will send the information to that email address.
  • If you purchased an SSL certificate, provide the CSR to the company from which you purchased the SSL certificate.