How to generate a key and CSR in cPanel for your SSL certificate

Before you can order an SSL certificate, you need to generate a private key and a Certificate Signing Request (CSR) in cPanel. The CSR contains your site and organisation details, and you paste it into the order form when buying your certificate. Both live in the SSL/TLS Certificates tool, on its Keys and Requests tabs.

Generate a private key

1. Log in to cPanel and, in the Security section, click SSL/TLS.

2. Open the Keys tab. Under Generate a New Private Key, choose the Key Type (the default RSA, 2,048-bit is fine for most certificates), optionally add a Description to help you identify the key, then click Generate.

   

3. cPanel creates the key and shows it on screen. You do not need to copy it - it stays safely in cPanel, ready for when you install your certificate.

Generate a Certificate Signing Request (CSR)

1. Open the Requests tab.

2. Under Generate a New Certificate Signing Request (CSR), choose the Key you just generated, then fill in your details: the Domains the certificate is for, your City, State, Country (choose it from the list), and Company, plus a contact Email. Optional fields such as Company Division and a CSR passphrase can be left blank.

   

3. Click Generate. cPanel displays your CSR. Copy the entire block, including the -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST----- lines, and paste it into your certificate provider's order form.