Install an SSL Certificate on a Domain
Posted by Matthew Jeffels, Last modified by Matthew Jeffels on 06 January 2017 03:05 PM

Install an SSL Certificate on a Domain

This interface allows you to install an SSL certificate to a domain. In order to use this feature you must already have created or purchased a certificate, and you will need to have the certificates key.

When you install a certificate, the interface will indicate whether your certificate is self-signed. Be aware that Self-signed certificates are easy targets for attackers and will generate security warnings in your users’ web browsers. You should only install a self-signed certificate temporarily, and replace the certificate with a certificate from a valid certificate authority.

SNI and Multiple Certificates

Server Name Indication (SNI) allows a server to install multiple certificates to the same IP address.

Multi-Domain (UCC/SAN) certificates secure multiple domains that share the same IP address that match the certificate's domain list.

Wildcard certificates secure a domain and an unlimited number of sub-domains.  

Install an SSL Certificate

You may use one of the two following methods to install SSL certificates to your server.

If the installation succeeds you will be presented with a confirmation message.

If the installation fails then you will be presented with an error message that indicates the problem.

Browse Certificates

To find and select a certificate on your server, and install it you will need to perform the following;

Click "Browse Certificates". The SSL Certificate List window will appear.
Select an account from the "Browse Account" menu, or select "Browse Apache". The menu's certificates correspond to the account that you select. This menu does not indicate that the system will install the selected certificate to the selected account.
Select the desired certificate. Click Use Certificate. The system will then automatically populates the textboxes.
If the domain does not use a specific dedicated IP address, select an IP address from the IP Address menu. You may only select IP addresses that the menu labels as shared or available.
If you selected a purchased SSL certificate, you may need to complete the Certificate Authority Bundle (optional) textbox. If the system does not populate this text box with information, contact the organization from which you purchased the certificate.
Select the Enable SNI for Mail Services checkbox. Mail SNI configures mail services to use the domain's SSL certificate instead of the server's default certificate. Mail SNI is not compatible with Webmail and will not function for any Webmail connection. Webmail connections use the cPanel service SSL certificate.

Finally click "Install".

Install by the Certificate's Domain

To use the domain name to find and install the certificate you will need to perform the following;

Enter your domain in the Domain textbox.
The "Autofill by Domain" button will appear. Enter the certificate's information in the appropriate textboxes, or click Autofill by Domain to automatically populate the certificate information textboxes. If multiple certificates exist for the same domain, the server attempts to choose the best certificate. In this scenario, to avoid potential issues, use the "Browse Certificates" method.
Select the "Enable SNI for Mail Services" checkbox. Mail SNI configures mail services to use the domain's SSL certificate instead of the server's default certificate. Mail SNI is not compatible with Webmail and will not function for any Webmail connection. Webmail connections use the cPanel service SSL certificate.

Finally click "Install".

Thanks

Matt Jeffels
PAC Web Hosting

(0 vote(s))
Helpful
Not helpful

Comments (0)