{"id":1035,"date":"2021-07-23T12:43:59","date_gmt":"2021-07-23T12:43:59","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/install-an-ssl-certificate-on-a-domain\/"},"modified":"2021-07-23T12:43:59","modified_gmt":"2021-07-23T12:43:59","slug":"install-an-ssl-certificate-on-a-domain","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/install-an-ssl-certificate-on-a-domain\/","title":{"rendered":"Install an SSL Certificate on a Domain"},"content":{"rendered":"<\/p>\n<div class=\"col-md-9\">\n<div class=\"flex-column flex-md-row article-header\">\n<div id=\"versioned-article-header\">\n<p class=\"valid-version-info\"><em>Valid for versions 82 through the latest version<\/em><\/p>\n<\/div>\n<div id=\"version-select-group\" aria-label=\"select versions\">\n<h4>Version:<\/h4>\n<h4>82<\/h4>\n<\/div><\/div>\n<hr>\n<h2 id=\"overview\">Overview<\/h2>\n<p>Use this interface to install an SSL certificate on a domain, subdomain, addon domain, or the server hostname. Before you can use this feature, you <strong>must<\/strong> create or purchase a certificate, and you <strong>must<\/strong> possess the certificate\u2019s key.<\/p>\n<p>For more information, read our What is Domain TLS? documentation.<\/p>\n<div class=\"callout callout-warning\">\n<div class=\"callout-heading\">Important:<\/div>\n<div class=\"callout-content\">\n<p>When you install a certificate, this interface indicates whether your certificate is self-signed. Self-signed certificates are easy targets for attackers and generate security warnings in your users\u2019 web browsers. <strong>Only<\/strong> install a self-signed certificate temporarily, until you can replace the certificate with a certificate from a valid certificate authority (CA).<\/p>\n<\/p><\/div>\n<\/div>\n<h3 id=\"sni-and-multiple-certificates\">SNI and multiple certificates<\/h3>\n<p>Server Name Indication (SNI) allows a server to install multiple certificates to the same IP address.<\/p>\n<ul>\n<li><strong>Multi-domain<\/strong> (UCC\/SAN) certificates secure multiple domains that share the same IP address and match the certificate\u2019s domains list.<\/li>\n<li><strong>Wildcard<\/strong> certificates secure a domain and an unlimited number of subdomains. For example, to secure <code>store.example.com<\/code> and <code>blog.example.com<\/code>, use a single wildcard certificate.<\/li>\n<\/ul>\n<h2 id=\"install-an-ssl-certificate\">Install an SSL certificate<\/h2>\n<p>Use either of the methods below to install certificates on your server.<\/p>\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Notes:<\/div>\n<div class=\"callout-content\">\n<ul>\n<li>If the installation succeeds, WHM displays a confirmation message.<\/li>\n<li>If the installation fails, WHM displays an error message to indicate the problem.<\/li>\n<\/ul><\/div>\n<\/div>\n<h3 id=\"browse-certificates\">Browse Certificates<\/h3>\n<p>To find and select a certificate on your server, and install it, perform the following steps:<\/p>\n<ol>\n<li>Click <em>Browse Certificates<\/em>. The <em>SSL Certificate List<\/em> will appear.<\/li>\n<li>Select an account from the <em>Browse Account<\/em> menu, or select <em>Browse Apache<\/em>.\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n        The menu\u2019s certificates correspond to the account that you select. This menu does <strong>not<\/strong> indicate that the system will install the selected certificate to the selected account.\n    <\/div>\n<\/div>\n<\/li>\n<li>Select the desired certificate.<\/li>\n<li>Click <em>Use Certificate<\/em>. The system automatically populates the text boxes.\n<ul>\n<li>If the domain does not use a specific dedicated IP address, select an IP address from the <em>IP Address<\/em> menu.\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n        You may only select IP addresses that the menu labels as <em>shared<\/em> or <em>available<\/em>.\n    <\/div>\n<\/div>\n<\/li>\n<li>If you selected a purchased SSL certificate, you may need to complete the <em>Certificate Authority Bundle (optional)<\/em> text box. If the system does not populate this text box with information, contact the organization from which you purchased the certificate.<\/li>\n<\/ul>\n<\/li>\n<li>Click <em>Install<\/em>.<\/li>\n<\/ol>\n<h3 id=\"install-by-the-certificate-s-domain\">Install by the certificate\u2019s domain<\/h3>\n<p>To use the domain name to find and install the certificate, perform the following steps:<\/p>\n<ol>\n<li>Enter your domain in the <em>Domain<\/em> text box. The <em>Autofill by Domain<\/em> button will appear.<\/li>\n<li>Enter the certificate\u2019s information in the appropriate text boxes, or click <em>Autofill by Domain<\/em> to automatically populate the certificate information text boxes.\n<div class=\"callout callout-info\">\n<div class=\"callout-heading\">Note:<\/div>\n<div class=\"callout-content\">\n        If multiple certificates exist for the same domain, the server attempts to choose the best certificate. In this scenario, to avoid potential issues, use the <em>Browse Certificates<\/em> method.\n    <\/div>\n<\/div>\n<\/li>\n<li>Click <em>Install<\/em>.<\/li>\n<\/ol>\n<h3 id=\"install-an-ssl-certificate-on-the-servername\">Install an SSL certificate on the ServerName<\/h3>\n<p>A ServerName is the main address or hostname, of your server. To install an SSL certificate on the ServerName, perform the following steps:<\/p>\n<ol>\n<li>Enter your ServerName in the <em>Domain<\/em> text box. The <em>Autofill by Domain<\/em> button will appear.<\/li>\n<li>Enter the certificate\u2019s information in the appropriate text boxes, or click <em>Autofill by Domain<\/em> to automatically populate the certificate information text boxes.<\/li>\n<li>Click <em>Install<\/em>.<\/li>\n<\/ol><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Valid for versions 82 through the latest version Version: 82 Overview Use this interface to install an SSL certificate on a domain, subdomain, addon domain, or the server hostname. Before you can use this feature, you must create or purchase a certificate, and you must possess the certificate\u2019s key. For more information, read our What &hellip;<\/p>\n","protected":false},"author":1,"featured_media":1036,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/1035"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=1035"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/1035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/1036"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=1035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=1035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=1035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}