In cPanel, go to Security → SSL/TLS → Generate, view, upload, or delete SSL certificate signing requests.
Fill in your domain name and organization details (these must match your business registration exactly for OV/EV certificates).
Click Generate. cPanel produces both a CSR and a matching private key — copy both and store the private key securely; you’ll need it during installation.
Paste the CSR into your SSL provider’s order form when purchasing the certificate. The CA will use this to generate your signed certificate.
Depending on certificate type, you’ll need to complete a validation email, DNS record, or (for OV/EV) provide business verification documents to the CA.
Once issued, the CA emails you the certificate file(s), often including an intermediate/CA bundle.
In cPanel, go to Security → SSL/TLS → Manage SSL sites.
Select your domain, then paste in the Certificate, the Private Key (from Step 1), and the Certificate Authority Bundle.
Click Install Certificate.
Verifying installation
Visit your site at https://yourdomain.com and check for the padlock icon. Use an online SSL checker tool to confirm the full chain (certificate + intermediate + root) is installed correctly — a missing intermediate certificate is the most common cause of “not fully trusted” warnings on some devices/browsers even when the padlock initially appears fine.
