Last modified: 2025 August 1

---

Looking for this interface?

Note:

Your hosting provider can enable or disable this interface for resellers in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges).

Overview

SSL certificates allow your web server to identify itself to the computers that access it. This interface allows you to manage SSL certificates for your server’s services. For example, you can manage certificates for the following services:

• Exim (SMTP).
• POP3 and IMAP.
• The cPanel services (cPanel & WHM and Webmail).
• Your FTP server.

You can use any of the following types of SSL certificates to secure your server’s services:

• A free Let’s Encrypt™ certificate.
• A certificate that you obtained from a certificate authority (CA).
• A self-signed certificate.
  Warning:

  If you server uses a self-signed certificate, we recommend that you install a certificate from a Certificate Authority (CA). For more information about assigning a hostname to your server, read our Automatic Hostname SSL Certificate Replacement documentation.

For more information about how to generate or purchase a certificate, read our Generate an SSL Certificate and Signing Request documentation.

Service SSL Certificates

The interface displays the following table, which lists the services on your server and the certificates for each service:

Section	Description
Service	The non-Apache service that the certificate secures.
Certificate Domains	The domain of the service that the certificate secures.
Certificate Expiration	The date on which the certificate expires. Note: Before the certificate expires, WHM sends a warning to the system administrator’s email address to reset or replace the certificates. A warning will also appear in WHM’s Home interface. When a certificate expires, your server installs a self-signed certificate. If your server meets the requirements to obtain a free certificate, the server automatically orders one the next time that the upcp maintenance script runs. When the signed certificate becomes available, the server downloads and installs it.
Certificate Key	The type of key that the system used to generate the certificate.
Actions	Reset Certificate — This option uninstalls the current certificate for the service and replaces it with a new self-signed certificate. Certificate Details — This option displays details about the service’s certificate. Apply Certificate to Another Service — This option lets you apply a certificate to multiple services.

If you do not see any SSL certificates in this list, create or purchase a certificate, then install it.

If you see a service that needs an SSL certificate and does not have one, you can install a new certificate or apply one of your existing certificates to that service.

Reset a Certificate

This option uninstalls the current certificate for the service and replaces it with a new self-signed certificate.

To reset a certificate, perform the following steps:

1. Click Reset Certificate next to the service for which to reset the certificate.
2. Click Proceed to generate and automatically install the certificate.

Certificate Details

This option displays the following details about the installed certificate for the service:

Section	Description
Domains	The domain of the service that the certificate secures.
Issuer	Information about the CA that issued the certificate. Note: This column displays a warning message for self-signed certificates.
Key	The type of key that the system used to generate the certificate.
Expiration	The date on which the certificate expires. Note: Before the certificate expires, WHM sends a warning to the system administrator’s email address to reset or replace the certificates. A warning also appears in WHM’s Home interface. If your server meets the requirements to obtain a free certificate, the server automatically orders one the next time that the upcp maintenance script runs. When the signed certificate becomes available, the server downloads and installs it.

Apply Certificate to Another Service

This option allows you to apply a certificate to multiple services. This is useful, for example, when you wish to apply a signed certificate for your server’s hostname to other services on your server.

To apply a certificate to another service, perform the following steps:

1. Click the appropriate Apply Certificate to Another Service link. The interface will scroll down to the Install a New Certificate section.
2. Select the checkboxes for the services for which to apply this certificate.
   Note:

   WHM automatically enters the details of the Install a New Certificate text boxes with the certificate’s information.

3. Click Install to install the certificate to the selected services, or click Cancel to cancel the operation.
   Warning:

   If you replace a certificate from a CA with a self-signed one, users may see warnings because their client applications do not trust self-signed certificates.

Install a New Certificate

This form allows you to install a new certificate that you created or purchased to secure the services on your server.

To install a new certificate on your server, perform the following steps:

1. To use a certificate that already exists on your server, click Browse Certificates. Select the services that you wish for the certificate to secure.
2. Click Browse Account and select the username from the menu, or click Browse Apache.
3. Select the certificate that you wish to use from the menu.
4. Click Use Certificate to use the certificate, or click Cancel to cancel the operation.
   Note:

   WHM automatically enters the certificate’s information into the Install a New Certificate form.

5. Paste the contents of the certificate file (.crt) into the Certificate text box.
   Note:

   Click Autofill by certificate to search for the appropriate private key and CA bundle from cPanel’s public CA bundle repository.

6. Paste the contents of the private key file (.key) into the Private Key text box.
7. If you have a CA bundle, paste the contents of that bundle (.cab) into the Certificate Authority Bundle text box.
8. Click Install to install the certificate, or click Cancel to cancel the operation.
9. If you selected the cpsrvd daemon, and the certificate has installed correctly, the interface will prompt you to restart the cpsrvd daemon. Click Restart cpsrvd to restart the cPanel service daemon.
   Important:

   You must restart the cpsrvd daemon each time that you install a new SSL certificate for a service.