Install a paid SSL certificate

Step 1: Generate a CSR

A CSR (certificate signing request) contains your domain and company details.

1. Log in to cPanel and open SSL/TLS under Security.
2. Under Certificate Signing Requests (CSR), click Generate, view, or delete SSL certificate signing requests.
3. Choose Generate a new 2,048 bit key, and enter your domain (e.g. yourdomain.co.bw, or *.yourdomain.co.bw for Wildcard), city, district, country (BW) and company name.
4. Click Generate and copy the whole CSR, including the -----BEGIN and -----END lines.

Step 2: Configure the certificate

1. Log in to the Client Area, go to Services → My Services, and click your SSL certificate.
2. Click Configure Now, paste the CSR and enter the administrative contact details.
3. Choose a validation method: – Email: an approval email goes to an address like [email protected]. That mailbox must exist. – DNS: add a TXT or CNAME record. See Add or edit DNS records. – HTTP file: upload a small file to your website.
4. Complete the validation. EV certificates also need company documents and a verification call.

Step 3: Install the certificate

1. Once issued, you’ll receive the certificate (.crt) and CA bundle by email.
2. In cPanel → SSL/TLS, click Manage SSL sites.
3. Choose your domain and paste the certificate. cPanel usually fills in the private key automatically. Paste the CA bundle too.
4. Click Install Certificate.

Check the result with a tool such as SSL Labs, then force HTTPS.