How can we help you today?
Install a Comodo SSL Cert on a Domain
- Login to the cPanel account.
- Click SSL/TLS in the Security section.
- Click the CSR link.
- Enter domains, one per line with and without the www.
- Enter City, State (no abbreviations), Country and Company.
- Click Generate.
- Now go to comodo.com/login and login (Comodo credentials are in user passwords).
- Click Web Host Reseller.
- Make sure credit is > $40 (per cert).
- Click “Buy” to the right of Positive SSL (located near the bottom).
- Go back to cPanel, copy and paste the “Encoded Cert Signing Request” into CSR box on Comodo.
- Select WHM/cPanel from dropdown.
- Select 1 year.
- Click Next.
- Select HTTP CSR Hash and then click “Show Alternative DCV Info”.
- Click HTTP CSR Hash tab.
- Copy info below “This text may contain…” into notepad.
- Name the notepad file “###.txt” – get name from HTTP CSR Hash.
- Upload text file to .well-known > pki-validation directory (create it if it doesn’t yet exist).
- Click continue on Comodo pop up.
- Click Manage Area button.
- Go back into Web Host Reseller.
- Click Report on your orders.
- Click Run Report.
- Download the zip file.
- Go to the account directory on the local server, create a certs folder if one does not exist.
- Extract the 2 files from the zip file in the certs directory (on the local server).
- Go back to cPanel and click Return to SSL Manager.
- Click the CRT link.
- Choose a cert file (halfway down the page) – grab the .crt file from the certs directory on the local server.
- Click upload certificate.
- Go to WHM and search for SSL.
- Click Install an SSL Cert on a Domain.
- Click the Browse Certificates button.
- Choose the account name from the dropdown.
- Choose the Comodo cert option.
- Click Use Certificate.
- If you get all green check marks, click Install.
- Click OK.
- Go to the back end of the website and Install and Activate the “Really Simple SSL” plugin.
- Click Go ahead, activate SSL button.
- Uncheck “flush” checkbox if you get an era and try again.
- Go back to FTP and delete the text file from pki-validation on the remote side.