How do I generate a CSR for my SSL Certificate with cPanel?

How to generate a CSR in cPanel




Recent versions of cPanel now have AutoSSL. If you only need a DV (Domain Validation) certificate,1) you may want to check if AutoSSL will serve your purposes.

What is a CSR?

A CSR is short for Certificate Signing Request. Your SSL certificate authority (CA) will ask for a certificate signing request to complete the certificate purchase. This article will guide you in creating a CSR for your SSL Certificate(s) via cPanel.

Generating a CSR with cPanel

This tutorial is written using the 'Paper Lantern' theme as a Reseller/root user, so your front end of cPanel may differ slightly, however, the basics should be the same.

  1. cPanel has made generating a CSR very simple. Just follow the few steps provided to generate a seamless CSR.
    • https:<yourserversip>:2083 or http:<yourserversip>:2082
  2. In the top search box (may be on the left depending what cPanel theme you use) enter 'SSL' in the box, or scroll down to the SSL/TLS icon, under "Security". Select the "SSL/TLS" icon to proceed.
  3. You should now see a list of options to choose from to proceed.
    • Click the "Generate, view, or delete SSL certificate signing requests." link under "Certificate Signing Requests (CSR)".
    • If this is the first CSR/SSL certificate that you are attempting to generate or install, and have no previously generated a Private Key, you will see a notification similar to the following:
      • (!) You do not have any Private Keys setup for this account. You must generate or upload a key before you can generate any certificate signing requests.
      • If you don't see that warning, you can proceed normally. If you do see the warning, you'll need to click your browser's "Back Button", then choose the "Generate, view, upload, or delete your private keys." link. Generate a default private key and continue with these steps as normal.
  4. Scroll down to the section that says, Generate a New Certificate. The asterisk (*) next to the option title denotes that this field is REQUIRED.
    • The drop-down option Key* has a default option for "Generate a new 2,048-bit key." - This is the default/preferred option for almost all SSL Certificate Authorities.
    • Domains* - This is the section that you will fill in for the domain/subdomain(s) that you are generating the CSR/SSL Certificate for. (eg.
    • City* - Full city name of the Business or Website's presence.
    • State* - Full state name of the Business or Website's presence. No abbreviations.
    • Country* - Use the drop-down box to select the appropriate country. cPanel will automatically assign the appropriate abbreviation.
    • Company* - Provide the legally-registered name for your business. If none exists, provide the owner's full legal name.
    • Company Division - Optional. This is the group or division/branch of the company for the website. (eg. Support)
    • Email - cPanel doesn't list this as a required field, however it is required and you'll need to provide a VALID email address. (eg.
    • Description - This is your option to provide details/description for your own references.
  5. Select and press the "generate" button once you've completely filled out the form as required.
  6. Once you've processed the generation successfully, you'll reach a page provided the encoded/generated CSR certificate! Select all of the provided text in the box, copy and paste it into a secure location.

That's it! You've generated your CSR successfully.

Now you can use this CSR for creating a proper signed SSL Certificate from an SSL Certificate Authority. Next, read how to install the signed SSL Certificate in cPanel in our Wiki.

Most SSL Certificate Authorities will prompt/ask for 'Web Server Type' when purchasing an SSL Certificate. The best choice/option would be 'cPanel', however, if the cPanel option is not listed, 'Apache/OpenSSL+ModSSL' would be adequate options as well.

  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

I'm unsure what to put as IP for the resolver configuration in WHM

Please leave default IPs in resolver configuration to give your VPS the best DNS performance...

Is there a way to limit bandwidth for a sub domain or cPanel account for one of our domains?

CPanel allows you to set the bandwidth limit for each account, once you reach the bandwidth...