How to Install a Custom SSL Certificate

Installing a Third-Party SSL Certificate

While SillyHost provides free AutoSSL certificates, you may need to install a custom SSL certificate if you have purchased an Organisation Validation (OV), Extended Validation (EV), or wildcard certificate from a third-party provider.

What You Need

Before installing a custom SSL, you should have the following files from your certificate provider:

• Certificate (CRT): The primary certificate file for your domain.
• Private Key (KEY): The private key generated when you created the CSR. This must match the certificate.
• CA Bundle (CABUNDLE): The intermediate certificate chain provided by your certificate authority.

Generating a CSR (Certificate Signing Request)

If you have not yet purchased your certificate, you will need a CSR first:

1. In cPanel, go to Security > SSL/TLS.
2. Click Generate, view, or delete SSL certificate signing requests.
3. Fill in the required details: domain, city, state, country, and organisation name.
4. Click Generate.
5. Copy the generated CSR and submit it to your SSL certificate provider during the purchase process.

Installing the Certificate

1. In cPanel, go to Security > SSL/TLS.
2. Click Manage SSL sites under "Install and Manage SSL for your site".
3. Select the domain from the dropdown menu.
4. Paste your Certificate (CRT) into the Certificate field.
5. Paste your Private Key into the Private Key field. If you generated the CSR in cPanel, click Autofill by Certificate to populate the key automatically.
6. Paste the CA Bundle into the Certificate Authority Bundle field.
7. Click Install Certificate.

After Installation

• Verify the certificate is working by visiting your site with https:// and checking the padlock icon.
• Use an SSL checker tool like SSL Labs to verify the certificate chain is complete and there are no configuration issues.
• Note that custom certificates will override AutoSSL for that domain. AutoSSL will not attempt to replace a valid custom certificate.
• Set a reminder to renew your certificate before it expires. Unlike AutoSSL, custom certificates do not renew automatically.