StarDomain

Ordering an SSL Certificate

Ordering an SSL Certificate

This guide walks you through the process of ordering an SSL certificate from {{COMPANY_NAME}}, from selecting the right type to completing domain validation.

Before You Order

Before purchasing an SSL certificate, determine:

  1. How many domains/subdomains you need to secure (single, wildcard, or multi-domain)
  2. What validation level you need (DV, OV, or EV) — see SSL Certificate Types Explained
  3. Your web server type (Apache, Nginx, IIS, LiteSpeed, etc.) for CSR generation

Step 1: Choose Your SSL Certificate

  1. Log in to your {{COMPANY_NAME}} client portal at {{SUPPORT_URL}}
  2. Navigate to Services > Order New Service > SSL Certificates
  3. Browse the available SSL products
  4. Select the appropriate certificate type:

- Single Domain SSL — for one domain

- Wildcard SSL — for a domain and all subdomains

- Multi-Domain SSL — for multiple different domains

  1. Choose your preferred Certificate Authority (CA) and validation level
  2. Select the certificate duration (1 year is standard)
  3. Add to cart and complete checkout

Step 2: Generate a CSR (Certificate Signing Request)

A CSR is a block of encoded text that contains your domain and organization details. It is required to issue your certificate.

Generating CSR in cPanel

  1. Log in to cPanel
  2. Go to Security > SSL/TLS
  3. Click Generate, view, or delete SSL certificate signing requests
  4. Fill in the required fields:

- Domains: Your domain name (e.g., www.example.com)

- City, State, Country: Your location

- Company: Your organization name

- Email: Your contact email

  1. Click Generate
  2. Copy the generated CSR text (including the -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST----- lines)

Generating CSR in DirectAdmin

  1. Log in to DirectAdmin
  2. Go to Account Manager > SSL Certificates
  3. Select Create a Certificate Request
  4. Fill in the required details
  5. Click Save and copy the CSR

Generating CSR via Command Line

openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

Keep the server.key file safe — you will need it during installation.

Tip: Always generate a new CSR for each certificate order. Do not reuse CSRs from previous certificates.

Step 3: Submit the CSR

  1. After purchase, go to Services > My Services
  2. Click on the SSL certificate service
  3. Click Configure or Submit CSR
  4. Paste your CSR into the provided field
  5. Select your web server type
  6. Enter the administrative contact email
  7. Click Submit

Step 4: Complete Domain Validation

After submitting the CSR, you must prove you control the domain. See Domain Validation Process for detailed instructions on each method:

  • Email validation — Approve via email sent to a standard address
  • DNS validation — Add a CNAME or TXT record
  • HTTP/HTTPS validation — Upload a file to your server

Step 5: Receive and Install

Once validation is complete:

  1. You will receive the SSL certificate via email
  2. Download the certificate files (typically includes the certificate, CA bundle, and intermediate certificates)
  3. Install the certificate on your server

Tip: For OV and EV certificates, the CA may contact you by phone to verify organization details. Ensure your phone number is reachable.

Troubleshooting

  • CSR generation error: Ensure the domain name in the CSR matches the domain you are securing. For wildcards, use *.example.com.
  • Validation email not received: Check spam folders. Ensure the email address exists and is receiving mail.
  • Order stuck in pending: Verify that domain validation is complete. For OV/EV, ensure all documentation has been submitted.
  • Certificate received but cannot install: Ensure you have the matching private key from the CSR generation step.

Need help ordering an SSL certificate? Contact {{COMPANY_NAME}} support at {{SUPPORT_EMAIL}} or open a ticket at {{SUPPORT_URL}}.