Knowledgebase

Synopsis:

You can use the Install an SSL Certificate on a Domain feature to install a certificate on your domain. Before you can use this feature, you must create or purchase a certificate, and also must have the corresponding key.
Previously, each SSL certificate required its own dedicated IP address. Server Name Indication (SNI) allows a server to have multiple certificates installed to the same IP address. If your operating system does not support SNI, you can also use a multi-domain certificate or a wildcard certificate.
Multi-domain (UCC/SAN) certificates may be installed on multiple domains that share the same IP address and match the certificate's domains list.
Wildcard certificates allow you to secure a domain and an unlimited number of subdomains.
For example, if you wished to secure store.example.com and blog.example.com, you can use a single wildcard certificate to do so.

PICK Important: When you install a certificate, the Install an SSL Certificate on a Domain feature indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers. Self-signed certificates also generate security warnings in your users’ web browsers. You should only install a self-signed certificate temporarily until you can replace the certificate with a certificate from a valid certificate authority.

How To Steps:

1. When you install a certificate on a domain, you can use the Browse Certificates or Autofill by Domain features to retrieve information. You can also choose to enter the information manually.

2. To retrieve information with Browse Certificates:
Click Browse Certificates. The SSL Certificate List window will appear.
You can either select an account from the Browse Account menu or click Browse Apache. The list of corresponding certificates will change.
Note: The listed certificates correspond to the selected account. This menu does not indicate that the selected certificate will be installed to the selected account.

3. Click the option that corresponds to the desired certificate.
Click Use Certificate to populate the available fields.
If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. You can only select an IP address that is labeled as shared or available.
If you selected a purchased SSL certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If this field is not already populated with information, you may need to contact the organization from which you purchased the certificate.

4. Click Install. You can click Reset to remove the information from all fields.
If the installation is successful, WHM will display a message to indicate that the certificate was installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem.

5. Autofill by Domain
To enter the domain name and populate the fields automatically:
Enter your domain in the Domain field.
If you have multiple certificates associated with the same domain, the server will attempt to choose the best certificate. To select the correct certificate and avoid potential issues, use Browse Certificates and follow the steps in the section above.

6. When you enter the complete domain name, the Autofill by Domain option will appear next to the Domain field. Click Autofill by Domain.
If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. You can only select an IP address that is labeled as shared or as available.
If you selected a purchased SSL certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If this field is not already populated with information, contact the organization from which you purchased the certificate.

7. Click Install.
You can click Reset to remove the information from all fields.
If the installation is successful, WHM will display a message to indicate that the certificate installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem. More information is available about how to troubleshoot an SSL installation.

8. To manually enter all of the information for your certificate:
Enter your domain in the Domain field.
When you enter the complete domain name, the Autofill by Domain option will appear next to the Domain field. If you wish to continue to enter information manually, do not click Autofill by Domain.
If the selected domain is not dedicated to a specific IP address, select an available IP address from the IP Address menu. You can only select an IP address that is labeled as shared or available.

9. In the Certificate field, copy and paste the entire contents of your certificate's .crt file.
In the Private Key field, copy and paste the entire contents of your certificate's .key file.
If you chose to install a purchased certificate, you may need to fill in the Certificate Authority Bundle (optional) field. If you do not have the information, contact the organization from which you purchased the certificate.

10. Click Install.
You can click Reset to remove the information from all fields.
If the installation is successful, WHM will display a message to indicate that the certificate installed. If the installation is unsuccessful, WHM will display an error message to indicate the problem. More information about how to troubleshoot an SSL installation is available.