cPanel SSL/TLS – Managing security certificates and enabling HTTPS

What is SSL/TLS

SSL/TLS, which you manage from cPanel, is the protocol that allows secure data transfer between the visitor's browser and the website's server.
With SSL enabled, your pages load over HTTPS instead of HTTP, protecting sensitive data such as forms, passwords and payment information.

Enabling SSL is essential for security, trust and SEO, since Google ranks HTTPS pages higher in search results.

What the SSL/TLS tool in cPanel offers

With cPanel's SSL/TLS tool you can:

• Generate and store Private Keys for your domains.

• Generate or upload Certificate Signing Requests (CSR).

• Install and manage SSL Certificates that you have issued.

• Add Certificate Authority Bundle (CA Bundle) when needed.

• View and manage all installed SSL certificates.

The tool is divided into separate sections, so you can handle each stage separately.

Detailed description of the options

1. Private Keys (KEY)

This section is where the private keys corresponding to each SSL certificate are generated and stored.
The private key is required to encrypt and decrypt data.
You can generate a new key or upload an existing one from another server.

At Konet, keys are generated automatically when you use AutoSSL or when you install SSL through WHM or cPanel.

2. Certificate Signing Requests (CSR)

If you want to buy or issue a certificate from a provider (e.g. Sectigo, DigiCert, GeoTrust), you need a CSR.
cPanel generates the CSR automatically once you fill in the domain, company and email details.
The CSR is signed with your private key and sent to the provider for approval.

3. Certificates (CRT)

This is where you upload the certificates given to you by the issuer (CRT files).
You can also see all certificates already installed, their expiry date and which domain they belong to.
If a certificate was issued by a third-party provider, you must upload it here before installing it.

4. Install and Manage SSL for your site (HTTPS)

This section is used to install or manage SSL on specific domains or subdomains.
You select the domain, paste the certificate (CRT) and the Private Key, and click Install Certificate.
If the certificate is complete and valid, HTTPS is enabled automatically.

5. Certificate Authority Bundle (CA Bundle)

Some certificates also need the intermediate CA Bundle file so that they are recognized correctly by all browsers.
cPanel lets you add it in the same installation form.
If you use AutoSSL or Let’s Encrypt through Konet, the CA Bundle is installed automatically.

What is AutoSSL

AutoSSL is a cPanel feature that automatically installs and renews free Let’s Encrypt or Sectigo SSL certificates for all domains of your account.
It renews automatically every 90 days without any action from the user.

At Konet, AutoSSL is enabled by default on all hosting plans.
All that is needed is for your domain to point correctly to our nameservers and to have an active DNS A record pointing to the server.

How to check it:

1. Log in to cPanel.

2. Go to Security → SSL/TLS Status.

3. If you see a green padlock next to your domain, SSL is active.

4. If you see a red or grey icon, click Run AutoSSL to start the issuance.

Types of SSL certificates

In cPanel you can use various types of SSL, depending on your needs:

• Domain Validation (DV): verifies domain ownership only.

• Organization Validation (OV): also verifies the business that owns it.

• Extended Validation (EV): provides the highest level of validation and security.

Konet offers all types of SSL certificates and installs them fully through the SSL/TLS tool or AutoSSL.

Practical examples

Example 1: Automatic SSL installation through AutoSSL
As soon as a new hosting account is created, AutoSSL automatically checks whether there is an active domain and issues a free SSL without any action from the user.

Example 2: Installing a commercial SSL from a provider
The customer buys an SSL from a third-party issuer. They generate a CSR in cPanel, receive the CRT from the provider, upload it to the SSL/TLS tool and click Install Certificate.

Example 3: Replacing an expired certificate
When an SSL is approaching expiry, you can upload the new certificate in the Certificates section and install it again, without any DNS or file changes.

Frequently Asked Questions (FAQ) about SSL in cPanel

How long does an SSL certificate last?
Most SSL certificates are valid for 1 year, while the free AutoSSL (Let’s Encrypt) certificates are renewed automatically every 90 days.

Do I need to do anything when the SSL expires?
No, AutoSSL automatically renews the free certificates. If you have a purchased SSL, you can request its renewal through Support.

What does a “Mixed Content” message mean?
It means that some images or scripts are still loading over HTTP. The links need to be updated to HTTPS.

Can I use the same SSL for multiple domains?
Yes, with a Multi-Domain SSL (SAN) or a Wildcard SSL (*.example.com) you can cover multiple domains or subdomains.

Does SSL reduce the site's speed?
No. With LiteSpeed Web Server and HTTP/3, an HTTPS connection is both secure and faster.

Useful links

• Official cPanel SSL/TLS documentation: https://docs.cpanel.net/cpanel/security/ssl-tls/

• AutoSSL Documentation: https://docs.cpanel.net/cpanel/security/autossl/

• Let’s Encrypt: https://letsencrypt.org/

• SSL Checker tool: https://www.ssllabs.com/ssltest/

Conclusion

cPanel's SSL/TLS tool gives you full control over generating, installing and managing SSL certificates.
You can generate CSRs, install certificates, check their expiry and make sure that every website of yours runs securely over HTTPS.

On Konet servers, AutoSSL is active on all plans, providing automatic protection and continuous renewal of SSL certificates, while the LiteSpeed Web Server and CloudLinux OS infrastructure ensures maximum speed and stability.