> ## Documentation Index
> Fetch the complete documentation index at: https://help.noxity.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Installation

> Install a certificate onto a domain. Manage SSL Hosts: the familiar SSL/TLS install page from the old cPanel UI.

The Installation tab is where you bind a certificate (and its key, and the CA bundle) to a specific domain. Long-time cPanel users will recognize it: this is the **Manage SSL Hosts** page, lifted into the new tabbed layout.

Open it from cPanel home → **Security** → **SSL/TLS Certificates** → **Installation**.

<Frame caption="Installation tab with the Manage Installed SSL Websites table">
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/noxity/images/cpanel/security-settings/ssl-tls-certificates/installation/listing-light.png" alt="Installation tab with installed SSL hosts and the install form below" className="block dark:hidden" />

  <img src="https://mintlify.s3.us-west-1.amazonaws.com/noxity/images/cpanel/security-settings/ssl-tls-certificates/installation/listing-dark.png" alt="Installation tab with installed SSL hosts and the install form below" className="hidden dark:block" />
</Frame>

## What's installed already

The top section, **Manage Installed SSL Websites**, lists every domain that has a certificate installed, with:

* **FQDNs.** The hostnames covered by the installed cert. Padlock icons next to each show whether the domain is actually covered (green) or whether the cert was installed but doesn't include this hostname (red).
* **Certificate Expiration.** When the cert expires.
* **Document Root.** The folder served on this hostname.
* **Actions.** Uninstall, Update Certificate, Certificate Details, Use Certificate for New Site.

The actions per row:

| Action                           | What it does                                                                                                           |
| -------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
| **Uninstall**                    | Remove the cert from this domain. The site keeps working over HTTP; HTTPS falls back to the default account cert.      |
| **Update Certificate**           | Open the install form pre-loaded with this domain. Use to swap a cert (renewed paid cert, switching from self-signed). |
| **Certificate Details**          | Inspect the installed cert: issuer, expiry, full chain, fingerprints.                                                  |
| **Use Certificate for New Site** | Install the same cert onto a different domain on the account. Useful for multi-domain certs.                           |

## Install a certificate

<Steps>
  <Step title="Click Browse Certificates or pick a domain">
    Two ways to start:

    * **Browse Certificates** opens a picker showing every cert in the [Certificates tab](/web-hosting/cpanel/security-settings/ssl-tls-certificates/certificates). Select one; cPanel pre-fills the install form with that cert and its matching key.
    * Pick a domain from the **Domain** dropdown directly; cPanel finds the most recent cert that covers it and pre-fills.
  </Step>

  <Step title="Verify the certificate body">
    The **Certificate: (CRT)** text area shows the cert text. If you'd rather paste a new cert here than upload it via the [Certificates tab](/web-hosting/cpanel/security-settings/ssl-tls-certificates/certificates) first, do it now.
  </Step>

  <Step title="Verify the private key">
    The **Private Key (KEY)** area shows the matching key, found by ID match. If it's blank or wrong, paste the right key (or pick one in the [Keys tab](/web-hosting/cpanel/security-settings/ssl-tls-certificates/keys)).
  </Step>

  <Step title="Set the CA bundle if needed">
    The **Certificate Authority Bundle: (CABUNDLE)** area is for the intermediate certificates that link your cert up to the CA's root. cPanel fetches the bundle from a public repository automatically, so this is usually empty.

    Paste a bundle here only when cPanel can't find one (private CA, very new CA, internal PKI).
  </Step>

  <Step title="Click Install Certificate">
    cPanel writes the cert + key + bundle into Apache's SSL config and reloads. The domain serves the new cert within seconds. Browsers see the change on their next request.
  </Step>
</Steps>

## What "shared IP" means here

The Installation page warns: **You don't have a dedicated IP address. Browsers that were released before 2013 may not support SNI. Because of this, users may see false security warnings when they visit your SSL-secured websites.**

In practice, every browser made in the last decade supports SNI; the warning is for ancient mobile devices and IE on Windows XP. You can ignore it for any reasonable audience. If you have a niche reason to need a dedicated IP (a regulator that mandates it, an unusual client base), open a ticket; dedicated IPs are available as an add-on.

## Common issues

<AccordionGroup>
  <Accordion title="&#x22;The certificate's domains do not match this website&#x22;">
    Cert was issued for `mybrand.com` and you're trying to install it on `othersite.com`. Issue a cert that covers the right domains, or use the right cert for this domain.
  </Accordion>

  <Accordion title="&#x22;Could not retrieve CA bundle&#x22;">
    cPanel couldn't fetch the intermediate chain from the public CA index. Either paste the chain into the CABUNDLE field manually (your CA provides it; usually a `chain.pem` or `intermediate.crt` in the issued bundle), or open a ticket and we'll source it.
  </Accordion>

  <Accordion title="Site shows the wrong cert after install">
    Browser cache or Cloudflare cache. Refresh in a private window. If Cloudflare is in front, purge the cache. Cert can take a minute to propagate to all worker regions.
  </Accordion>

  <Accordion title="Uninstall but want to switch back">
    The old cert is still in [Certificates](/web-hosting/cpanel/security-settings/ssl-tls-certificates/certificates) (uninstall doesn't delete it). Click **Install** on the row to re-deploy.
  </Accordion>
</AccordionGroup>

## Need a hand?

<CardGroup cols={2}>
  <Card title="Open a ticket" icon="life-ring" href="https://members.noxity.io/submitticket.php">
    Best for anything that needs an account check or a config change on our end.
  </Card>

  <Card title="Live chat" icon="messages" href="https://noxity.io/contact">
    Faster for quick questions during business hours.
  </Card>
</CardGroup>