cpanel

To configure a free SSL certificate manually using HTTP File Verification and .well-known/pki-validation in cPanel, here’s the step-by-step process using a demo domain as an example. We’ll use SSL For Free for this purpose.

1. Log in to cPanel

• Access your cPanel using the URL (e.g., https://yourdomain.com/cpanel).
• Log in with your cPanel credentials.

2. Go to the SSL/TLS section

• Once logged in, scroll down to the Security section.
• Click on SSL/TLS.

3. Generate a CSR (Certificate Signing Request)

You need to generate a CSR before applying for your free SSL certificate.

1. Under the SSL/TLS section, click on Generate, view, or delete SSL certificate signing requests.
2. Fill out the form:
   • Domains: Enter your domain name (e.g., example.com).
   • City, State, Country: Enter your location information.
   • Company: If it’s personal, you can use your own name.
   • Email: Enter an email address.
3. Click Generate.

The CSR will be generated, and you will need this CSR for the next step.

4. Get Free SSL from SSL For Free Using HTTP File Upload Verification

1. Go to SSL For Free.
2. Enter your domain (e.g., example.com) and click Create Free SSL Certificate.
3. Select the Manual Verification (HTTP File Upload) option.

HTTP File Upload Verification Using .well-known/pki-validation Directory

1. SSL For Free will provide you with files for HTTP verification. These files need to be uploaded to a specific folder on your web server.
2. You will be provided with the file name and file content for the verification file.

5. Upload the Verification Files in cPanel

1. Go back to your cPanel and open File Manager (usually under the Files section).
2. In File Manager, navigate to the root folder of your website (usually public_html for the main domain).
3. Inside the public_html folder:
   • Create the following directory if it doesn’t already exist: .well-known/pki-validation.
     • To do this, click on + Folder at the top and name the folder .well-known.
     • Inside the .well-known folder, create another folder called pki-validation.
4. Now, upload the verification file:
   • Inside the pki-validation folder, click on Upload in the File Manager.
   • Upload the verification file provided by SSL For Free. Ensure the file name and content are exactly as instructed.

6. Verify the Upload

• After uploading the file, go back to the SSL For Free verification page and click Verify.
• SSL For Free will check if the file was uploaded correctly.

7. Download the SSL Certificate

Once the verification is successful, SSL For Free will provide you with three files:

• Certificate
• Private Key
• CA Bundle

Download these files.

8. Install the SSL Certificate in cPanel

1. Go back to the SSL/TLS section in cPanel.
2. Click on Manage SSL sites under Install and Manage SSL for your site.
3. Scroll down to the Install an SSL Website section.
4. Select your domain from the drop-down list.
5. Paste the following information:
   • Certificate: Paste the contents of the Certificate file.
   • Private Key: Paste the contents of the Private Key file.
   • Certificate Authority Bundle (CABUNDLE): Paste the contents of the CA Bundle file.
6. Click Install Certificate.

9. Verify SSL Installation

• Go to your domain (e.g., https://example.com) in a browser. You should see the lock icon in the address bar, indicating that the SSL certificate is active.

10. Force HTTPS (Optional)

To make sure that all traffic is redirected to HTTPS, you can add a rule to the .htaccess file.

1. In File Manager, locate the .htaccess file in the public_html folder.
2. Add the following code to the top of the file to force HTTPS:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]