This guide explains how to install an SSL certificate issued through ClouDNS in cPanel or WHM. It covers Actalis, RapidSSL, and Sectigo certificates, the correct Certificate Authority Bundle (CABUNDLE), and SSL installation and verification.
Before starting, make sure you have all the required certificate files and the matching private key.
| Required item | Description |
|---|---|
| SSL Certificate (CRT) | The domain certificate downloaded from the ClouDNS web panel. |
| Private Key (KEY) | The private key generated together with the Certificate Signing Request (CSR). |
| Certificate Authority Bundle (CABUNDLE) | The intermediate certificate or certificate chain that matches the issuer of your SSL certificate. |
Download your SSL certificate from the ClouDNS web panel. The file will typically be named:
your-domain.com.crt |
Obtain the matching intermediate certificate or CA Bundle from your Certificate Authority. Select the appropriate provider below.
After downloading the matching CA certificates, continue with the installation below. cPanel and WHM provide separate fields for the SSL Certificate (CRT), Private Key (KEY), and Certificate Authority Bundle (CABUNDLE). |
Log in to your cPanel account.
Navigate to:
Security > SSL/TLS > Manage SSL sites |
Depending on your cPanel theme and version, the interface may also be labeled SSL/TLS Certificates or Install and Manage SSL for your site (HTTPS).
In the Install an SSL Website section, select the domain you want to secure.
If available, click Autofill by Domain. cPanel will attempt to find an existing SSL certificate and its corresponding private key.
If the fields were not filled automatically, enter the certificate information manually:
| Field | What to enter |
|---|---|
| Certificate (CRT) | Paste the contents of your-domain.com.crt. |
| Private Key (KEY) | Paste the private key corresponding to the CSR used to issue this certificate. |
| Certificate Authority Bundle (CABUNDLE) | Paste the matching CA certificate chain for Actalis, RapidSSL, or Sectigo as described in Step 1. |
| CA Bundle
cPanel may automatically retrieve the CA Bundle and may mark this field as optional. If the bundle is not populated, or you are manually supplying it, paste the correct intermediate certificate chain for your issuer. |
For Actalis DV RSA 2025: Paste the PEM contents of actalis_dv_tls_rsa_2025.pem followed by actalis-crosscert-tls-rsa-2025-v3.crt into the same CABUNDLE field.
For RapidSSL: Paste the contents of RapidSSL-TLS-RSA-CA-G1.pem, or the corresponding intermediate certificate for the actual issuer.
For Sectigo: Paste the contents of sectigo-ca-bundle.pem, or the corresponding Sectigo certificate chain.
Click Install Certificate. If the installation succeeds, cPanel displays a confirmation message and assigns the certificate to the selected domain.
For additional information, see cPanel SSL/TLS documentation.
If you have WHM administrator access, you can install the same SSL certificate directly through WHM.
Log in with your WHM account.
Navigate to:
Home > SSL/TLS > Install an SSL Certificate on a Domain |
Enter the domain name in the Domain field.
Click Autofill by Domain to look for an existing certificate and private key, or use Browse Certificates to select a certificate already saved on the server.
Verify or enter the following values:
| Field | What to enter |
|---|---|
| Certificate | The contents of your-domain.com.crt. |
| Private Key | The corresponding private key generated with the CSR. |
| Certificate Authority Bundle | The matching Actalis, RapidSSL, or Sectigo intermediate CA chain from Step 1. |
For an Actalis DV RSA 2025 certificate, the CABUNDLE contains both the intermediate certificate and the cross-certificate, in that order.
Click Install. WHM displays a confirmation message if the certificate was installed successfully.
For additional information, see WHM certificate installation documentation.
After installation, open your website using HTTPS and verify that the correct certificate is presented without browser warnings.
If you have command-line access, inspect the certificate chain served by the server:
openssl s_client -connect your-domain.com:443 -servername your-domain.com -showcertsVerify that the certificate covers your domain and that the server presents the matching intermediate certificate or certificates. Review the reported certificate verification status.
You can install the same SSL certificate and its corresponding private key on multiple servers hosting domain names that are covered by the certificate. You normally do not need to purchase a separate SSL certificate for each server.
On each server, install the certificate from ClouDNS together with its corresponding private key and matching Actalis, RapidSSL, or Sectigo CA Bundle.
| Required item | Example or description |
|---|---|
| SSL Certificate | your-domain.com.crt |
| Private Key | The private key associated with that certificate. |
| CA Bundle | The intermediate certificate chain matching the issuer. |
The private key must correspond to the CSR used for the certificate. If different servers previously generated separate private keys or CSRs, use the private key matching the actual issued certificate.
| Security
A private key gives access to the identity protected by the certificate. Transfer it only through secure channels and restrict who can access it on every server. |
For a Wildcard SSL certificate, make sure the relevant wildcard hostname is included in the certificate. For example:
*.domain.com |
Install the certificate and corresponding private key on each server that serves a hostname covered by the certificate.