SSL guides & resources
Install SSL in cPanel and verify the live website
Install a paid SSL certificate in cPanel, check AutoSSL settings and verify the live domain, certificate chain and renewal responsibility.
First establish whether your hosting plan already supplies and renews a suitable certificate through AutoSSL. A paid certificate may be appropriate for a specific validation, coverage or support requirement, but it is not required merely because a website uses cPanel.
cPanel version 134 and later can provide a unified SSL/TLS Certificates interface. Older or differently configured accounts may show separate SSL/TLS and SSL/TLS Status screens. Your host controls which tools and privileges are available.
In this guide
A practical checklist
Map the domain to the correct hosting account
Confirm the document root, addon domain or subdomain and whether a CDN handles visitors first. Record the current certificate and expiry before changing anything. Obtain authorized panel access and a recovery path through the hosting provider.
Prepare the certificate and matching key
If a CSR was created in this hosting account, its corresponding private key may already be stored there. Use the certificate issued for that request and the issuer’s intermediate bundle. A certificate generated from another key will not match.
Install through the available SSL interface
In the unified interface, use the Installation tab; older accounts expose Install and Manage SSL in SSL/TLS. Choose the exact domain and supply the certificate, matching key and required chain. Review the detected names before installing.
Check AutoSSL policy with the host
Use the Status tools to understand which names AutoSSL manages. Ask how your host handles existing certificates and failed renewals. Do not disable working automatic coverage for unrelated domains or assume a paid certificate disables AutoSSL globally.
Verify outside cPanel
Open the root domain and www separately over HTTPS, and any covered subdomains you use. Inspect the served certificate’s names, issuer and expiry. Test redirects, login and forms; if a CDN is present, verify the origin separately through an authorized method.
Assign the next renewal
Record where the private key remains, who handles reissuance, and who replaces the certificate on the server. The subscription end date and installed certificate expiry are different reminders.
Common problems and decisions
The panel says installed but the old certificate appears
Check DNS, CDN termination, the chosen virtual host and whether every server was updated. Avoid repeated installation until you know which system answered the request.
A private key or chain is missing
Ask the CSR creator for the approved deployment process. Do not email a private key to a shared mailbox. If the key is lost or compromised, coordinate a fresh key and reissuance.
The installation controls are unavailable
A hosting provider may hide or restrict the feature. Request installation through that provider instead of trying to change server-wide settings from a shared account.
Prepare for the next conversation
For an installation quotation in BDT, provide the domain list, cPanel version if known, hosting provider and whether a CDN is used. Confirm whether the fee includes only the initial installation or later certificate replacements as well. Agree a maintenance time in Bangladesh time and keep a person available to test the application.
Continue with the right guide or service
Common questions
Must I buy SSL if AutoSSL already works?
No. First compare your actual coverage, validation, automation and support needs. A working suitable free certificate may meet them.
Can I use a certificate bought from another seller?
Usually the hosting platform can install a compatible certificate and key. Confirm the hosting restrictions, issuer chain and service scope before paying for installation.
Does installing SSL fix mixed content?
No. HTTPS installation and application content are separate checks. HTTP images, scripts or embedded resources may still require correction.
Does cPanel renew every paid certificate automatically?
Do not assume so. Renewal depends on the issuer, automation integration and hosting policy. Assign the responsibility explicitly.