(WHM >> Home >> SSL/TLS >> Install an SSL Certificate on a Domain)
Use this interface to install an SSL certificate on a domain, subdomain, or addon domain. Before you can use this feature, you must create or purchase a certificate, and you must possess the certificate's key.
For more information, read our What is Domain TLS? documentation.
When you install a certificate, this interface indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers and generate security warnings in your users’ web browsers. Only install a self-signed certificate temporarily, until you can replace the certificate with a certificate from a valid certificate authority (CA).
SNI and multiple certificates
Server Name Indication (SNI) allows a server to install multiple certificates to the same IP address.
- Multi-domain (UCC/SAN) certificates secure multiple domains that share the same IP address and match the certificate's domains list.
- Wildcard certificates secure a domain and an unlimited number of subdomains. For example, to secure
blog.example.com, use a single wildcard certificate.
Install an SSL certificate
Use either of the methods below to install certificates on your server.
- If the installation succeeds, WHM displays a confirmation message.
- If the installation fails, WHM displays an error message to indicate the problem.
To find and select a certificate on your server, and install it, perform the following steps:
- Click Browse Certificates. The SSL Certificate List window will appear.
Select an account from the Browse Account menu, or select Browse Apache.
The menu's certificates correspond to the account that you select. This menu does not indicate that the system will install the selected certificate to the selected account.
- Select the desired certificate.
Click Use Certificate. The system automatically populates the text boxes.
If the domain does not use a specific dedicated IP address, select an IP address from the IP Address menu.
You may only select IP addresses that the menu labels as shared or available.
- If you selected a purchased SSL certificate, you may need to complete the Certificate Authority Bundle (optional) text box. If the system does not populate this text box with information, contact the organization from which you purchased the certificate.
- Click Install.
Install by the certificate's domain
To use the domain name to find and install the certificate, perform the following steps:
Enter your domain in the Domain text box. The Autofill by Domain button will appear.
Enter the certificate's information in the appropriate text boxes, or click Autofill by Domain to automatically populate the certificate information text boxes.
If multiple certificates exist for the same domain, the server attempts to choose the best certificate. In this scenario, to avoid potential issues, use the Browse Certificates method.
- Click Install.