How to install a third-party SSL certificate

This article describes how to obtain and install a third-party SSL certificate on your Webhost.Berlin account.

Installing a third-party SSL certificate

You can install an SSL certificate from a third-party provider on your Webhost.Berlin account. There are two ways to do this:

• You can purchase a brand-new SSL certificate. To do this, you must first generate a private key and Certificate Signing Request (CSR) in cPanel. You submit the CSR to the third-party provider, who then generates an SSL certificate and sends it to you.
• If you have already purchased an SSL certificate from another provider for your domain, you can install it in cPanel. To do this, you must have the private key and SSL certificate. Some SSL certificates require a Certificate Authority (CA) bundle as well. (The CA bundle may also be called an Intermediate Certificate.)

Generate a private key and CSR

If you have not already purchased an SSL certificate from another provider, you must first generate a private key and Certificate Signing Request (CSR).

To generate a private key and CSR, follow these steps:

1. Log in to cPanel.
   If you do not know how to log in to your cPanel account, please see this article.
2. In the Security section of the cPanel home screen, click SSL/TLS Manager.
3. Under Private Keys (KEY), click Generate, view, upload, or delete your private keys. The Private Keys page appears.
4. Under Generate a New Private Key, confirm that the Key Size is set to 2,048 bits.
5. In the Description text box, type a descriptive name for the key, such as SSL cert private key.
6. Click Generate. cPanel generates and displays the private key. You are now ready to generate a Certificate Signing Request (CSR).
7. Click Return to SSL Manager.
8. Under Certificate Signing Requests (CSR), click Generate, view, or delete SSL certificate signing requests. The SSL Certificate Signing Request page appears.
9. Under Generate a New Certificate Signing Request (CSR), in the Key list box, select the description for the private key you generated in step 6.
10. In the Domains text box, type the domain that you want to secure with the certificate.
    Make sure that you specify the correct domain name that you want to secure. Webhost.Berlin recommends that you use the www.example.com domain form, because then the certificate works with both https://www.example.com and https://example.com. (Do not add https:// to the domain name in the Domains text box.)
11. Complete the remaining fields for the CSR.
    • Make sure you use the correct two-letter country code (for example, US or FR). For a complete list of these codes, please visit http://www.iso.org/iso/country_codes/iso_3166_code_lists/country_names_and_code_elements.htm.
    • Make sure you use a passphrase that you will remember. Webhost.Berlin cannot recover the passphrase if you forget it!
12. To create the CSR, click Generate. cPanel generates and displays the CSR.
13. Copy the CSR text and submit it to the third-party SSL provider. When you receive the SSL certificate from the provider, you are ready to enable SSL for your web site. Go to the Install the certificate and activate SSL procedure below.

Install a private key

If you have already purchased an SSL certificate from another provider and you have the private key and certificate, you must first install the private key using cPanel.

To install a private key, follow these steps:

1. Log in to cPanel.
   If you do not know how to log in to your cPanel account, please see this article.
2. In the Security section of the cPanel home screen, click SSL/TLS Manager.
3. Under Private Keys (KEY), click Generate, view, upload, or delete your private keys. The Private Keys page appears.
4. Under Upload a New Private Key, upload the key using one of the following methods:
   • Paste the key text in the Paste the key below text box, type a description in the Description text box, and then click Save.
   • Alternatively, click Browse, select the .key file on your computer, type a description in the Description text box, and then click Upload.
5. Click Go Back.
6. Click Return to SSL Manager.
7. You are now ready to install the certificate and enable SSL for your web site. Go to the Install the certificate and activate SSL procedure below.

Install the certificate and activate SSL

At this point, you should have a private key installed and a certificate from the third-party provider. (You may also optionally have a CA bundle.) If so, you are ready to install the certificate and activate SSL for your web site.

To do this, follow these steps:

1. From the SSL/TLS Manager page, under Certificates (CRT), click Generate, view, upload, or delete SSL certificates. The Certificates page appears.
2. Under Upload a New Certificate, upload the certificate using one of the following methods:
   • Paste the certificate text in the Paste your certificate below text box, type a description in the Description text box, and then click Save Certificate.
   • Alternatively, click Browse, select the .crt file on your computer, type a description in the Description text box, and then click Upload Certificate.
3. Click Go Back, and then click Return to SSL Manager.
4. Under Install and Manage SSL for your site (HTTPS), click Manage SSL sites.
5. Under Install an SSL Website, click Browse Certificates, select the certificate you want to use, and then click Use Certificate. cPanel fills in the Certificate (CRT) and Private Key (KEY) fields automatically.
6. In the Domain list box, select the domain you want to secure with the certificate.

7. If your SSL certificate requires a CA (Certificate Authority) bundle, paste it under Certificate Authority Bundle (CABUNDLE). Otherwise, leave this field blank.
   

   Not all SSL certificates require a CA bundle (which is also sometimes called an Intermediate Certificate). If you are unsure whether your certificate requires a CA bundle, contact the certificate provider.
8. Click Install Certificate. cPanel installs the certificate on the server and enables SSL. When the process is complete, you receive an SSL Host Successfully Installed message.
9. Click
   . You can now securely access the specified domain by using the https:// prefix in a web browser. If you need further assistance, please open a support ticket with our Tech Team on the Customer Portal at https://berlin.hosting.

Related Articles

• Introduction to SSL

  What is SSL, and why would I use it? If you have never worked with SSL certificates before, we recommend you start here.

• Installing a GlobalSign OneClick SSL certificate

  Securing your site with SSL has never been quicker or easier. Learn how to order and install a GlobalSign OneClick SSL certificate on your web site.

• Installing a GlobalSign SSL certificate

  This article applies to all GlobalSign SSL certificates that do not have “one-click” installation. This includes wildcard SSL certificates, as well as organization-verified and extended-validation SSL certificates.

• Installing a RapidSSL or Symantec SSL certificate

  This article guides you step-by-step through the process of obtaining a RapidSSL or Symantec Secure Site SSL certificate and installing it on your account.