CSR Generation - cPanel 11.x (Paper Lantern Theme-Modern)

A CSR (Certificate Signing Request) is the block of encoded text you hand to a Certificate Authority when you order an SSL/TLS certificate. In cPanel 11.x with the Paper Lantern theme, you generate it directly from the control panel: cPanel creates a matching private key at the same time, keeps the key on the server, and gives you the CSR to submit. This guide walks through the process for that specific cPanel version and theme.

What a CSR actually contains

When you generate a CSR, cPanel produces two linked pieces at once: a private key that stays on your server and must never be shared, and the CSR itself, which carries your public key plus the identifying details of the site (domain, organisation, location). The Certificate Authority reads the CSR, verifies you control the domain, and signs a certificate that only your private key can use. If you lose the private key, the issued certificate is useless, so treat both with care.

Generating the CSR in cPanel 11.x (Paper Lantern)

1. Log in to cPanel and, in the Security section, open SSL/TLS.
2. Under Certificate Signing Requests, click Generate, view, or delete SSL certificate signing requests.
3. In the Key menu, either let cPanel generate a new 2,048-bit key or select an existing key you have already created.
4. Enter your Domains. For a single site use the exact hostname (for example www.example.com). You can list more than one domain if your certificate covers several.
5. Complete the identifying fields: City, State, Country (two-letter code), Company, and Company Division. For a plain domain-validated certificate these organisation fields are informational, but keep them accurate.
6. Add an Email and, optionally, a Passphrase and Description.
7. Click Generate. cPanel displays the encoded CSR block, beginning with -----BEGIN CERTIFICATE REQUEST-----.
8. Copy the entire block, including the BEGIN and END lines, and paste it into your Certificate Authority's order form when prompted for the CSR.

cPanel stores the matching private key in the same SSL/TLS area, so you do not need to save it separately, though you can view or download it there if you ever need to move the certificate to another server.

After the certificate is issued

Once the Certificate Authority validates your request and sends back the signed certificate (and any intermediate or CA bundle), return to the SSL/TLS area, open Manage SSL sites, and install the certificate against the correct domain. The private key that cPanel created alongside your CSR is matched automatically. If the key and certificate do not match, installation fails, which is the usual sign that a CSR was generated for a different key or a different domain than the one being installed.

Choosing a sensible key

A 2,048-bit RSA key is the standard modern minimum and is accepted by every mainstream Certificate Authority. If your host offers it and your certificate supports it, a larger RSA key or an ECDSA key can be used, but 2,048-bit RSA remains the safe default for cPanel-hosted sites. For a broader view of secure key and protocol choices, Mozilla publishes a widely used reference at ssl-config.mozilla.org.

Where this fits at ASEOHosting

Every plan we run is cPanel-based, so the steps above apply whether you host a single brand or a spread of sites across dedicated Class C IPs. If you would rather not generate and manage CSRs by hand, we can supply and install certificates for you: see our SSL certificates page for the options. For related setup questions, the SSL certificates FAQ and our cPanel and technical guides hub cover installation, renewals, and common errors.

Worth being clear on one point: an SSL/TLS certificate secures the connection and is expected by browsers and users, but it is not a ranking booster in the way a dedicated IP protects a network's footprint. Install it because your visitors and your certificate authority require it, not because it will move rankings on its own.