Ultra Web Hosting includes free Let's Encrypt SSL certificates that are installed automatically for all domains on your account. If you need to install a purchased SSL certificate (from a certificate authority like Comodo, DigiCert, or Sectigo), here is how to do it in cPanel.
Free Let's Encrypt SSL is already active
All domains on Ultra Web Hosting automatically receive a free Let's Encrypt SSL certificate. It renews automatically every 60 days. You only need to follow this guide if you purchased a premium SSL certificate (EV, OV, or wildcard) from a certificate authority.
01. Free SSL (Already Installed)
Check your SSL status: cPanel > Security > SSL/TLS Status. All domains should show a green padlock. If a domain is missing its certificate, click "Run AutoSSL" to generate one.
For more on SSL, see SSL Certificates and HTTPS on Your Website. To redirect HTTP to HTTPS, see How to Redirect HTTP to HTTPS.
02. Installing a Purchased SSL Certificate
- Log into cPanel > Security > SSL/TLS
- Click "Manage SSL sites" under "Install and Manage SSL"
- Select the domain from the dropdown
- Paste the certificate (CRT) into the "Certificate" field. This is the file your certificate authority sent you.
- Paste the private key into the "Private Key" field. This was generated when you created the CSR (Certificate Signing Request).
- Paste the CA bundle (intermediate certificates) into the "Certificate Authority Bundle" field. Your CA provides this.
- Click "Install Certificate"
If you generated the CSR through cPanel (Security > SSL/TLS > Generate CSR), the private key is already stored in cPanel. Click "Autofill by Certificate" after pasting the CRT to automatically fill in the matching private key.
03. After Installing
- Force HTTPS - Enable the HTTPS redirect. See Redirect HTTP to HTTPS.
- Fix mixed content - Update internal links from http:// to https://. See Fix Mixed Content Warnings.
- Set a renewal reminder - Purchased certificates do not auto-renew like Let's Encrypt. Set a calendar reminder before the expiration date.
Need Help With SSL?
If you are having trouble installing your certificate or are unsure which files go where, open a ticket and we will install it for you.
Open a Support TicketFrequently Asked Questions
Do I need to install an SSL certificate?
Usually not. UWH provides free Let's Encrypt SSL via AutoSSL, installed and renewed automatically for all domains on your account. You only install one manually if you purchased a certificate from a certificate authority.
How do I install a purchased SSL certificate in cPanel?
In cPanel open SSL/TLS then Manage SSL Sites, choose the domain, and paste the certificate (CRT), the private key (KEY), and the CA bundle into the fields, then Install. cPanel validates and activates it for that domain.
Where do I get the certificate files to install?
Your certificate authority (such as Sectigo, DigiCert, or Comodo) issues the CRT and CA bundle after you submit a CSR. The matching private key is the one generated with the CSR in cPanel under SSL/TLS. You need all three to install.
What do I do after installing the SSL certificate?
Force HTTPS so visitors use the secure version and fix any mixed-content links. Confirm the padlock shows and the certificate covers the exact hostname, including www if you use it. See the http-to-https redirect guide.
Quick Recap
- Free Let's Encrypt SSL is already installed on all domains
- Only follow this guide for purchased EV/OV/wildcard certificates
- Install via cPanel > Security > SSL/TLS > Manage SSL Sites
- You need 3 things: Certificate (CRT), Private Key, and CA Bundle
- Set a renewal reminder for purchased certificates
SSL certificate management · Last updated November 2026 · Browse all SSL articles
