freessl.pl Polski Log in Get a certificate
Menu

How to install an SSL certificate in cPanel

Updated October 2026 · about 5 min read

In short

In cPanel, open “SSL/TLS” (from version 134, the “Installation” tab of “SSL/TLS Certificates”), choose your domain, paste cert.pem, privkey.pem and chain.pem and click “Install Certificate”. In Meridian, use “Security” → “SSL Certificates”.

cPanel is a control panel used by many hosting providers. It comes in three versions of the interface: the older “SSL/TLS” page, a single “SSL/TLS Certificates” page with tabs (version 134 and later) and the new Meridian interface (version 138 and later). This guide covers all three.

Files you need

cert.pem, privkey.pem and chain.pem. Both key types work: ECDSA and RSA.

Upload the certificate from production mode. A certificate from test mode is only for checking the process: browsers don't trust it, and some panels won't accept it at all.

Before you start

  • Many hosting providers that use cPanel issue free certificates automatically (a feature called AutoSSL). If your domain already has a working certificate from your hosting provider, you don't need to upload anything.

Certificates page with tabs (cPanel 134 and later)

  1. In the “Security” section, open “SSL/TLS Certificates” and go to the “Installation” tab.
  2. Choose your domain in the “Domain” menu and paste the files into the three fields (see below for which goes where).
  3. Click “Install Certificate”.

What to paste into which field

cert.pemCertificate (CRT)
privkey.pemPrivate Key (KEY)
chain.pemCertificate Authority Bundle (CABUNDLE)
The file from the generator and the panel field its content goes into.
  • Certificate (CRT): the entire contents of cert.pem
  • Private Key (KEY): the entire contents of privkey.pem
  • Certificate Authority Bundle (CABUNDLE): the entire contents of chain.pem. If the panel fills in this field by itself, leave it as it is.

Older layout

  1. In the “Security” section, click “SSL/TLS”, then “Manage SSL sites” (under “Install and Manage SSL for your site (HTTPS)”).
  2. Choose your domain in the “Domain” menu and paste the files into the three fields (see below for which goes where).
  3. Click “Install Certificate”.

What to paste into which field

cert.pemCertificate (CRT)
privkey.pemPrivate Key (KEY)
chain.pemCertificate Authority Bundle (CABUNDLE)
The file from the generator and the panel field its content goes into.
  • Certificate (CRT): the entire contents of cert.pem
  • Private Key (KEY): the entire contents of privkey.pem
  • Certificate Authority Bundle (CABUNDLE): the entire contents of chain.pem. If the panel fills in this field by itself, leave it as it is.

Meridian interface (menu on the left: Dashboard, Websites, Security)

Meridian is the new cPanel interface, available since version 138 (July 2026). Your hosting provider decides whether to turn it on.

  1. In the menu on the left, choose “Security”, then the “SSL Certificates” tab.
  2. Click “Manage” next to your domain. If the domain already has a certificate (for example a free one from your hosting provider), remove it first: “Advanced” tab, “Danger Zone” section, “Uninstall” button.
  3. Click “Set up SSL”, then “Install a Certificate from a Provider”.
  4. Paste the files into the fields (see below for which goes where). Click “Continue”, check the details and click “Install”.
  5. If the form has no field for the private key, click “Classic cPanel Theme” at the top and follow the steps for the page with tabs or the older layout. If there is no such button, ask your hosting provider for help.

What to paste into which field

cert.pemCertificate (PEM)
chain.pemCA Bundle (optional, PEM)
The file from the generator and the panel field its content goes into.
  • Certificate (PEM): the entire contents of cert.pem
  • CA Bundle (optional, PEM): the entire contents of chain.pem

How to copy the content of a file

  1. Windows: right-click the file, choose “Open with” and then “Notepad”. Mac: Control-click the file, choose “Open With” and then “TextEdit”.
  2. Select all the text (Ctrl+A, on a Mac Cmd+A) and copy it (Ctrl+C, on a Mac Cmd+C).
  3. In the panel, click into the field and paste (Ctrl+V, on a Mac Cmd+V). Paste everything, including the BEGIN and END lines, and don't change anything.

Checking the result

Open your website over https:// and click the padlock (or the settings icon) next to the address. The certificate details should show Let's Encrypt as the issuer and an expiry date matching the panel. If the browser still shows the old certificate, wait a few minutes and reload the page.

If you see a warning instead of your website, we explain the error codes on the page “Your connection is not private”. If the site opens over https but looks broken or something doesn't work, see mixed content. Finally, turn on the redirect from http to https so everyone lands on the secure version.

Good to know

  • If your hosting provider allows AutoSSL to replace certificates it did not issue (the server option “Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates”), AutoSSL may replace your certificate with its own when your certificate has 3 days left before it expires. Renew earlier, when our reminder arrives.
  • To send visitors to https automatically, go to “Domains” and turn on “Force HTTPS Redirect” for your domain. It only works when the domain has a valid certificate.

When you renew

Follow the same steps. In the older layout and on the page with tabs, a new certificate for the same domain replaces the old one. In Meridian, first remove the old certificate (“Manage” → “Advanced” → “Uninstall”), then install the new one.

Hosting panels change from time to time. If something looks different from this guide, write to kontakt@freessl.pl and we'll update it.

Read next

All guides12 hosting panels and devicesHow it workswhere the files come fromGeneratorget a certificate
Ready? A certificate in a few minutes, free of charge.Get a certificate