1. cPanel & WHM Documentation
  2. WHM
  3. SSL-TLS
  4. Install an SSL Certificate on a Domain
whmui ssl domains

Install an SSL Certificate on a Domain

Valid for versions 110 through the latest version

Version:

110

Last modified: August 26, 2024

Looking for this interface?
Note:

Your hosting provider can enable or disable this interface for resellers in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges).

Overview

Use this interface to install an SSL certificate on a domain, subdomain, addon domain, or the server hostname. Before you can use this feature, you must create or purchase a certificate, and you must possess the certificate’s key.

For more information, read our What is Domain TLS? documentation.

Important:

When you install a certificate, this interface indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers and generate security warnings in your users’ web browsers. Only install a self-signed certificate temporarily, until you can replace the certificate with a certificate from a valid certificate authority (CA).

SNI and multiple certificates

Server Name Indication (SNI) allows a server to install multiple certificates to the same IP address.

  • Multi-domain (UCC/SAN) certificates secure multiple domains that share the same IP address and match the certificate’s domains list.
  • Wildcard certificates secure a domain and an unlimited number of subdomains. For example, to secure store.example.com and blog.example.com, use a single wildcard certificate.

Install an SSL certificate

Use either of the methods below to install certificates on your server.

Notes:
  • If the installation succeeds, WHM displays a confirmation message.
  • If the installation fails, WHM displays an error message to indicate the problem.

Browse Certificates

To find and select a certificate on your server, and install it, perform the following steps:

  1. Click Browse Certificates. The SSL Certificate List will appear.
  2. Select an account from the Browse Account menu, or select Browse Apache.
    Note:
    The menu’s certificates correspond to the account that you select. This menu does not indicate that the system will install the selected certificate to the selected account.
  3. Select the desired certificate.
  4. Click Use Certificate. The system automatically populates the text boxes.
    • If the domain does not use a specific dedicated IP address, select an IP address from the IP Address menu.
      Note:
      You may only select IP addresses that the menu labels as shared or available.
    • If you selected a purchased SSL certificate, you may need to complete the Certificate Authority Bundle (optional) text box. If the system does not populate this text box with information, contact the organization from which you purchased the certificate.
  5. Click Install.

Install by the certificate’s domain

To use the domain name to find and install the certificate, perform the following steps:

  1. Enter your domain in the Domain text box. The Autofill by Domain button will appear.
  2. Enter the certificate’s information in the appropriate text boxes, or click Autofill by Domain to automatically populate the certificate information text boxes.
    Note:
    If multiple certificates exist for the same domain, the server attempts to choose the best certificate. In this scenario, to avoid potential issues, use the Browse Certificates method.
  3. Click Install.

Install an SSL certificate on the ServerName

A ServerName is the main address or hostname, of your server. To install an SSL certificate on the ServerName, perform the following steps:

  1. Enter your ServerName in the Domain text box. The Autofill by Domain button will appear.
  2. Enter the certificate’s information in the appropriate text boxes, or click Autofill by Domain to automatically populate the certificate information text boxes.
  3. Click Install.

Additional Documentation