How to create and install a SSL Certificate

The first operation that you must carry out to create an SSL certificate is the generation of a unique CSR (Certificate Signing Request) code: a portion of text encrypted with a key of at least 2048 bits, in which all your domain data are listed, such as country, city, company name, email address, etc.

If you own of a Keliweb hosting, the procedures for generating the CSR, requesting and installing the SSL Certificate will be entirely managed by our team.

In the event that you wish to purchase a certificate for an external domain that does not point to Keliweb, you will have to generate the CSR code directly from the control panel of your hosting, in the case we are considering cPanel, by performing a few simple steps:

1. Log in to the cPanel control panel
2. In the "Security" section, select the "SSL / TLS" item
3. Click on "Certificate Signing Request"
4. Fill in the required fields and click on "Generate"

Then provide the CSR to our team that will forward the request to the certification authority responsible for validation. The validation message will be sent by the certifying body to the email address associated with the domain.

You must therefore indicate, among the data required to create the CSR, the email address associated with the domain, choosing from the following options:

• postamaster@yourdomain.com
• hostmaster@yourdomain.com
• admin@yourdomain.com
• administrator@yourdomain.com
• webmaster@yourdomain.com

Replace yourdomain.com with your domain name. Following the validation, the entity will send the Certificate which, using a private key, you can install in full autonomy on the server. You can generate the private key via cPanel control panel, in the "SSL / TLS" section already described above.

To proceed with the installation of the certificate in cPanel, you must:

1. Log in to your cPanel, using the credentials provided when activating the hosting service;
2. In the "Security" section, click on "SSL / TLS";
3. Click on "Install and manage SSL for the site";
4. In the "CRT" section enter the certificate to be installed and in the "Private Key" section the required information;
5. Click on "Install Certificate" to complete the operation.

It is not recommended to activate an SSL Certificate on a certified domain with PEC. The presence of an SSL certificate could, in fact, compromise the receipt of e-mails by the account.