Skip to main content
The Installation tab is where you bind a certificate (and its key, and the CA bundle) to a specific domain. Long-time cPanel users will recognize it: this is the Manage SSL Hosts page, lifted into the new tabbed layout. Open it from cPanel home → Security → SSL/TLS Certificates → Installation.
Installation tab with installed SSL hosts and the install form below

Installation tab with the Manage Installed SSL Websites table

​
What’s installed already

The top section, Manage Installed SSL Websites, lists every domain that has a certificate installed, with:
  • FQDNs. The hostnames covered by the installed cert. Padlock icons next to each show whether the domain is actually covered (green) or whether the cert was installed but doesn’t include this hostname (red).
  • Certificate Expiration. When the cert expires.
  • Document Root. The folder served on this hostname.
  • Actions. Uninstall, Update Certificate, Certificate Details, Use Certificate for New Site.
The actions per row:

​
Install a certificate

1

Click Browse Certificates or pick a domain

Two ways to start:
  • Browse Certificates opens a picker showing every cert in the Certificates tab. Select one; cPanel pre-fills the install form with that cert and its matching key.
  • Pick a domain from the Domain dropdown directly; cPanel finds the most recent cert that covers it and pre-fills.
2

Verify the certificate body

The Certificate: (CRT) text area shows the cert text. If you’d rather paste a new cert here than upload it via the Certificates tab first, do it now.
3

Verify the private key

The Private Key (KEY) area shows the matching key, found by ID match. If it’s blank or wrong, paste the right key (or pick one in the Keys tab).
4

Set the CA bundle if needed

The Certificate Authority Bundle: (CABUNDLE) area is for the intermediate certificates that link your cert up to the CA’s root. cPanel fetches the bundle from a public repository automatically, so this is usually empty.Paste a bundle here only when cPanel can’t find one (private CA, very new CA, internal PKI).
5

Click Install Certificate

cPanel writes the cert + key + bundle into Apache’s SSL config and reloads. The domain serves the new cert within seconds. Browsers see the change on their next request.

​
What “shared IP” means here

The Installation page warns: You don’t have a dedicated IP address. Browsers that were released before 2013 may not support SNI. Because of this, users may see false security warnings when they visit your SSL-secured websites. In practice, every browser made in the last decade supports SNI; the warning is for ancient mobile devices and IE on Windows XP. You can ignore it for any reasonable audience. If you have a niche reason to need a dedicated IP (a regulator that mandates it, an unusual client base), open a ticket; dedicated IPs are available as an add-on.

​
Common issues

Cert was issued for mybrand.com and you’re trying to install it on othersite.com. Issue a cert that covers the right domains, or use the right cert for this domain.
cPanel couldn’t fetch the intermediate chain from the public CA index. Either paste the chain into the CABUNDLE field manually (your CA provides it; usually a chain.pem or intermediate.crt in the issued bundle), or open a ticket and we’ll source it.
Browser cache or Cloudflare cache. Refresh in a private window. If Cloudflare is in front, purge the cache. Cert can take a minute to propagate to all worker regions.
The old cert is still in Certificates (uninstall doesn’t delete it). Click Install on the row to re-deploy.

​
Need a hand?

Open a ticket

Best for anything that needs an account check or a config change on our end.

Live chat

Faster for quick questions during business hours.