# Buying and activating an SSL certificate

> Order a Sectigo DV, OV, EV or wildcard SSL certificate from Ruachost, validate your domain by email, DNS or file, and install it.

Source: https://helpcenter.ruachost.com/ssl-security/ssl-certificates/ordering-an-ssl-certificate/

This guide takes you from ordering a paid **Sectigo** SSL certificate to having it running on your site. If you only need basic HTTPS, you may not need to buy one: every Ruachost hosting plan includes [free SSL](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/how-to-install-ssl-certificate-on-your-site-using-lets-encrypt-ssl/).

> **Prefer us to do it?:**
Our support team can generate the CSR, validate and install the certificate on your Ruachost hosting for you. Just [open a support ticket](https://dashboard.ruachost.com/submitticket.php) after ordering.

## Step 1: Order the certificate

1. Go to [ruachost.com](https://ruachost.com) or the [client area](https://dashboard.ruachost.com) and choose an SSL certificate:
   - **DV:** domain validated, issued in minutes
   - **OV:** organisation validated, issued in a few days
   - **EV:** extended validation, issued in a few days
   - **Wildcard:** covers `*.example.com`
2. Complete checkout.

See [What is an SSL certificate?](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/what-is-an-ssl-certificate/) for help choosing.

## Step 2: Generate a CSR and submit it

A **CSR** (certificate signing request) contains your domain and organisation details. Creating it also creates the **private key**, which stays on your server.

1. In cPanel, open **SSL/TLS → Certificate Signing Requests (CSR)** and generate one for your domain. See [Generating a CSR using cPanel](https://helpcenter.ruachost.com/ssl-security/csr-generation/generating-a-csr-using-cpanel/). For other servers, see the [CSR generation guides](https://helpcenter.ruachost.com/ssl-security/csr-generation/how-to-generate-csr-code-certificate-signing-request/).
2. In the client area, go to **Services → My Services**, select the certificate and click **Configure** (or **Complete Configuration**).
3. Paste the CSR, including the `-----BEGIN CERTIFICATE REQUEST-----` and `-----END CERTIFICATE REQUEST-----` lines.
4. Fill in the contact details and choose a validation method (see below).

## Step 3: Validate your domain

Sectigo must confirm you control the domain. Choose one of three methods:

| Method | What you do | Good to know |
| --- | --- | --- |
| **Email** | Click the link in an email sent to an address such as `admin@`, `administrator@`, `webmaster@`, `hostmaster@` or `postmaster@` your domain | Create that mailbox in cPanel first if it doesn't exist |
| **DNS** | Add the CNAME record you're given to your domain's DNS | Works even if the site isn't live yet. See [Managing DNS records](https://helpcenter.ruachost.com/domains/dns/dns-resource-records/) |
| **File upload (HTTP)** | Upload a small text file to `public_html/.well-known/pki-validation/` | The domain must already point to your hosting |

DV certificates are usually issued within minutes of validation.

**OV and EV** certificates also need organisation validation. Sectigo checks your business registration (for Nigerian businesses, your CAC details) and may call the phone number listed for your organisation. Make sure your details match your official records to avoid delays.

## Step 4: Install the certificate

Once issued, you'll receive the certificate by email, and you can also download it from the client area.

1. In cPanel, open **SSL/TLS → Manage SSL sites**.
2. Select your domain, paste the **certificate (CRT)**, and click **Autofill by Certificate**. cPanel finds the private key and CA bundle automatically.
3. Click **Install Certificate**.

See [Installing a third-party SSL certificate](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/installing-a-third-party-ssl-certificate/) for details, and [How to get the intermediate CA bundle](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/how-to-get-the-intermediate-ca-bundle/) if cPanel asks for it.

## Step 5: Use HTTPS

Make sure visitors are sent to `https://`. See [How to force HTTPS on your website](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/how-to-force-redirect-http-to-https-using-htaccess/). Optionally, [add the Sectigo site seal](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/installing-an-ssl-certificate-site-seal/).

## Related articles

- [How do I reissue an SSL certificate?](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/how-do-i-reissue-an-ssl-certificate/)
- [How can I find the private key for my SSL certificate?](https://helpcenter.ruachost.com/ssl-security/ssl-certificates/how-can-i-find-the-private-key-for-my-ssl-certificate/)