Exchange data on the Internet using the HTTP protocol is common in our lives, doing it safely is another song and the word has a lot to do with it “Secure”That we add to the protocol to make it HTTPS.
Encrypting information to make travel safer is increasingly important and necessary; for this you must know how Install an SSL Certificate in cPanel, your hosting panel, so that your e-commerce store or your professional or company website communicate with greater privacy on the Internet.
The most common question in these cases is usually Do I really need an SSL Certificate?. Tell you that by default the payment gateways that are used in most shopping carts, be it PrestaShop, WooCommerce, VirtueMart, etc., carry out secure transactions within the gateway and not on your website.
Do I need an SSL Certificate for my Store or website?
Some time ago I would have answered that it is not necessary, but things have changed a lot in recent years and Google (that GH that knows it all) says that you have to work with SSL so that data transactions between users and websites are more safe.
Does this mean that it is not necessary to have an SSL Certificate ?, Naturally it does not mean that you should do without it, and if you also take into account that giants like Google value more the sites that use HTTPS, the question is almost answered alone .
If you collect data on your website from clients, their credit cards or sensitive data and you operate in English territory, or you sell for this market, you must comply with the LOPD and LSSI that include issues such as electronic commerce, sale of services online, online contracting, information and advertising and brokerage services.
To install an SSL Certificate for a store with WooCommerce (WordPress), PrestaShop or VirtueMart (Joomla), it is not necessary to have a Fixed IP for its installation and use.
How do I install it?
Based on the fact that you have already purchased the SSL certificate or use a certificate Let’s Encrypt (Free) for example, and that you have downloaded it to your computer, let’s see in a brief way how it is to install an SSL Certificate in the cPanel Hosting Panel.
Summary process of installing an SSL Certificate in cPanel:
- Download and unzip the purchased SSL Certificate on your computer.
- Access your Hosting panel (cPanel).
- Go to section Security, SSL / TLS.
- Select the domain to associate the SSL Certificate with.
- Fill in the empty blocks of:
- Certificate: (CRT).
- Private key: (KEY).
- Certification body package: (CABUNDLE).
- Click the bottom button Install Certificate.
- Verify that the fields validate and do not return a Certificate error.
You already have the SSL Certificate, (free or paid) and you have downloaded it to your computer in .zip format most likely. You need to unzip that packaged file so that you can then upload the files, or edit them, to fill in the certificate fields in your hosting panel.
Now access your hosting panel, in this case based on cPanel, and go to the section Security and click on the option SSL / TLS.
Once inside this section you have to select the option Install and manage SSL for your site (HTTPS) to be able to add the Certificate that you are going to use on your website.
Here begins the dance … ヅ
Now it’s time to install the SSL Certificate in your Hosting associating it to the desired domain.
It is worth paying attention to the following notice first, since it usually generates many queries in the Support Departments, since mention is made of the need to have a Fixed IP (dedicated).
Browsers that support SNI:
- Internet Explorer 7 or higher versions (Windows Vista or higher).
- Mozilla Firefox 2.0 or higher versions.
- Google Chrome 6.0 and higher versions.
- Safari 3.0 or higher versions.
- Mobile Safari on iOS 4.0 or higher versions.
- Android 3.x browser or higher versions.
- Windows Phone 7
- Opera 8.0 or higher versions.
- Opera Mobile 10.1 or higher versions.
- Konqueror 4.7 or higher versions.
If the browser from which you access a website with HTTPS does not support SNI, a warning will be visible certificate error, that the user can accept and access the secure site.
Note: You do not have a dedicated IP address. Therefore, web browsers that do not support the Server Name Indication will likely give users false security warnings when accessing any of the SSL websites. Microsoft® Internet Explorer ™ on Windows XP ™ is the most widely used web browser that does not support SNI.
You will see a button called Examine which is especially important because it allows you to see SSL Certificate List that you already have available for your domain.
In this list you will see:
- Domains associated with the SSL Certificate.
- Certificate Issuing Entity.
- Certificate expiration date.
- Certificate Description.
If you click on “Use the Certificate” the Certificate fields that you must review before clicking on will be automatically filled in Install Certificate.
View of the automatically completed Certificate (data obfuscated for security).
However, this is not the process that I want to explain, but it is important that you know that this option exists and that you can apply it if you already have the Certificate installed in your Hosting, possibly if you requested it from your Support Department previously.
Having clarified these two points, let’s continue…
Sections that you must configure:
- Domain: The one we have available or planned for this Certificate.
- IP Address: By automatic assignment, that of the server where your website is hosted.
- Certificate (CRT)
- Private key (KEY)
- Certification Authority Package (CABUNDLE)
This data is obtained from the Certificate files that you have downloaded and extracted on your computer.
Let’s look at each of these fields in detail …
It will be the domain to which the SSL Certificate will be associated, especially if you have several active domains in your Hosting.
Note: Beware of mistakenly associating temporary domains (temporary url) with the SSL Certificate.
You will notice that the domain side select there is a button that says Auto fill by domain and that if the SSL Certificate is already on the available server, or was previously installed, you can fill in the following fields for this Certificate automatically.
If none is available yet, which will likely be your case if it’s your first time with an SSL Certificate, you’ll see a notice that no certificate is available.
No certificate for the domain webempresa.cc could be found.
This was already planned because this article tries to explain precisely how to install it manually, which gives more work, but also more satisfaction after
By automatic assignment, that of the server where your website is hosted.
You must open the file cc-file-name.crt of those you have on your computer downloaded.
Open it with a plain text editor (Notepad, etc.) so that you don’t mistakenly add formatting code to the text. And once opened copy the content.
Now stick it on the box Certificate (CRT) from your hosting panel (cPanel).
All certificates start with a header similar to this:
Verify that it starts with 5 hyphens —– and that it does not contain characters or spaces before or after the start or end of the code. This code start and code end should also be copied and included in the field Certificate (CRT).
Let’s go for the KEY …
Private key (KEY)
In this case the process is easier and simply by clicking the button Autofill by certificate.
Clicking the field Private key (KEY) it should fill in automatically.
If the private key (KEY) was not on the server, then you will have to edit the .key file that you downloaded to your computer and copy the data of that key and paste it in the field Private key (KEY) manually.
Certification Authority Package (CABUNDLE)
The same will happen as with the field Private key (KEY), if the certificate was on the server, the data for CABUNDLE will have been automatically retrieved and no action will be necessary, directly viewing the data already completed in the corresponding box, in your hosting panel (cPanel).
Make sure you have the option checkbox enabled Enable SNI for mail services.
And finally, in the SSL Certificate installation phase, you will have to click on the button Install certificate to complete the process and for the magic to occur.
You will see the notice shortly Installing …
And after a few seconds the result of the installation process of the SSL certificate in your cPanel.
Now the Certificate page will already show the data of the installed SSL Certificate.
After the correct installation of the SSL Certificate and its corresponding activation, it is not necessary to wait for the propagation process so that it is accessible because it does not need it, once activated it is already available for use.
From online services like SSLChecker.com you can check if your site is working correctly with SSL activated.
Don’t forget that now, depending on the CMS you use, WordPress, PrestaSHop, Joomla, etc., you will have to enable HTTPS so that everything works correctly on your website.
Recommended Related Articles
I want to thank the contribution of Cesar Maeso, Websites Are Us Systems Administrator, in the preparation of this article, mainly for his patience and the support given so that this article sees the light. Thanks César !! (ツ)
Member of the Websites Are Us technical team.
Coordinator of content on the Blog and YouTube.
Technical support in CyberProtector. Teacher at Websites Are Us Learning.