# Installing a third-party SSL certificate

> Install an SSL certificate bought from another provider in cPanel or WHM using your private key, certificate and CA bundle.

Source: https://helpcenter.ruachost.com/ssl-security/ssl-certificates/installing-a-third-party-ssl-certificate/

If you purchase an SSL certificate from a provider other than **Ruachost**, you can still install it on your hosting account. WHM (on a VPS) and cPanel provide tools to upload and configure third‑party SSL certificates.

## What Is a Third‑Party SSL?

- A certificate purchased from an external Certificate Authority (CA) such as DigiCert, Sectigo, or GlobalSign.
- Unlike Ruachost‑issued SSLs, these require manual installation.
- You must have the **private key** and **certificate files** generated during the CSR process.

## Steps to Install a Third‑Party SSL Certificate

### 1. Gather Required Files

- **Private Key** → Generated when you created the CSR.
- **Certificate File (.crt)** → Issued by the Certificate Authority.
- **CA Bundle (Intermediate Certificates)** → Provided by the CA to complete the trust chain.

### 2. Install via WHM

1. **Log in to WHM.**
2. In the search box, type **Install an SSL Certificate on a Domain**.
3. Enter the domain name.
4. Paste the **Certificate**, **Private Key**, and **CA Bundle** into the respective fields.
5. Click **Install**. WHM will validate and apply the certificate immediately.

### 3. Install via cPanel (Alternative)

1. **Log in to cPanel.**
2. Go to **SSL/TLS → Manage SSL Sites**.
3. Select the domain.
4. Paste the **Certificate**, **Private Key**, and **CA Bundle**.
5. Click **Install Certificate**.

## Verifying Installation

- Visit your site using `https://` and check for the padlock icon.
- Use SSL testing tools (e.g., SSL Labs) to confirm proper installation.
- Ensure the CA bundle is correctly installed to avoid trust errors.

> **Note:**
- Without the private key, the certificate cannot be installed.
- If you already purchased an SSL elsewhere, only the installation step is required.
- DNS propagation is not needed for SSL installation, but ensure your domain resolves correctly.