This guide explains how to install an SSL certificate in cPanel 11.x using the Paper Lantern (Modern) theme. Once your certificate has been issued, cPanel lets you upload and activate it in a couple of minutes without touching the command line. ASEOHosting also publishes a downloadable step-by-step PDF walkthrough for cPanel 11.x if you prefer to follow along with screenshots.

What you need before you start

SSL installation goes smoothly when you have all three pieces ready. When you order or renew a certificate, you should end up with:

  • The certificate (CRT), the signed public certificate issued for your domain by the certificate authority.
  • The private key (KEY), generated at the same time you created the certificate signing request (CSR). Keep this file secret and never share it.
  • The CA bundle (chain), the intermediate certificates that link your certificate back to a trusted root.

If you generated your CSR inside the same cPanel account, the private key is usually stored there already and cPanel can match it for you automatically.

Certificate (CRT) signed for your domain Private key (KEY) keep secret CA bundle (chain) intermediates cPanel 11.x SSL/TLS installer HTTPS

Installing the certificate in cPanel 11.x (Paper Lantern)

  1. Log in to cPanel and, in the Security section, open SSL/TLS.
  2. Under Certificates (CRT), choose Generate, view, upload, or delete SSL certificates, then paste or upload your issued certificate so cPanel stores it in the account.
  3. Return to the SSL/TLS home and open Install and Manage SSL for your site (HTTPS).
  4. Select the domain from the drop-down. cPanel will try to autofill the certificate, the matching private key, and the CA bundle. Paste any field that does not populate automatically.
  5. Click Install Certificate. cPanel confirms when the certificate is live on the domain.

After installation, load your site with https:// in the address bar and check for the padlock. It is normal to wait a few minutes for the change to take effect. If you still see a warning, clear your browser cache and confirm you are testing the exact hostname the certificate was issued for, for example www versus the bare domain.

Common issues

  • Private key does not match: the certificate must be paired with the key from the same CSR. Regenerate the CSR and reissue the certificate if the key was lost.
  • Untrusted or incomplete chain: make sure the CA bundle is present, otherwise some browsers and crawlers will flag the certificate as untrusted.
  • Mixed content warnings: once HTTPS works, update internal links, images, and scripts to https:// so every resource loads securely.

Related help

If you have not bought a certificate yet, you can order one from our SSL certificates page, then come back here to install it. For more cPanel walkthroughs see the cPanel and technical guides hub, and for certificate-specific questions browse the SSL certificates FAQ. If you would like a recommended TLS configuration once the certificate is installed, the Let's Encrypt documentation is a solid, vendor-neutral reference.

A valid SSL certificate protects data in transit and removes the "not secure" label from your site. It is a baseline trust and security requirement rather than a ranking trick, but serving every site over HTTPS is expected practice for any modern hosting setup.

Was this answer helpful? 67 Users Found This Useful (258 Votes)