Knowledge Base

How to Replace Your SSL Certificate CSR with WebSocle

Replacing your SSL Certificate CSR (Certificate Signing Request) is required whenever you need to reissue your SSL certificate, whether due to a domain change, key compromise, or simply updating your cryptographic strength. WebSocle makes this process straightforward through its integrated cPanel environment and SSL Certificate Management Dashboard.

Follow the steps below to generate a new CSR, submit it to WebSocle, validate your domain, and install your newly issued SSL certificate.

1. Generate a New CSR on Your WebSocle cPanel Server

Before reissuing your SSL certificate, you must generate a fresh CSR from your hosting server. This ensures your new certificate is tied to a new private key stored securely on your WebSocle‑cPanel environment.

Steps to Generate a CSR in WebSocle‑cPanel

1. Access your hosting service (see details here).
2. In cPanel, scroll to the Security section and select SSL/TLS Certificates.
3. Click Requests to generate the Certificate Signing Requests (CSR).
4. Fill out the CSR form, then click Generate.

cPanel will produce a new CSR and private key pair.

Copy the CSR text block (including -----BEGIN CERTIFICATE REQUEST----- and -----END CERTIFICATE REQUEST-----).

2. Copy and Paste the Generated CSR into Your WebSocle SSL Certificate Management Dashboard

Once your CSR is ready:

1. Return to your WebSocle Client Area.
2. Navigate to SSL Certificates.
3. Open the SSL certificate you want to reissue.
4. Paste your new CSR into the CSR field.
5. Click Replace CSR.

WebSocle will validate the CSR format and prepare your certificate for reissuance.

3. Choose Your Domain Control Validation (DCV) Method

To prove domain ownership, you must complete DCV. WebSocle supports all industry‑standard validation methods:

Available DCV Methods

• Email Validation: Receive a verification link at an approved domain email (e.g., admin@, webmaster@), etc.).
• DNS CNAME Validation: Add a CNAME record provided by WebSocle to your DNS zone.
• HTTP File Upload Validation: Upload a small validation file to your domain’s .well-known/pki-validation/ directory.

Choose the method that best fits your environment. Email validation is recommended for the novices.

4. Complete Your Domain Validation

After selecting your DCV method:

• If using Email, click the link sent to the validation email.
• If using DNS, add the CNAME record exactly as provided and wait for propagation.
• If using HTTP, upload the file to the correct directory and ensure it is publicly accessible.

Once the Certificate Authority detects successful validation, your SSL certificate will be issued automatically.

5. Download Your New SSL Certificate from the WebSocle SSL Certificate Dashboard

When validation is complete:

1. Return to your WebSocle SSL Certificate Management Dashboard.
2. Your certificate status will show Issued.
3. Download the certificate bundle, which typically includes:
• The certificate file and a pdf file.

Extract and save the certificate file securely, you will need it for installation.

6. Install Your New SSL Certificate on Your WebSocle‑cPanel Server

Now that your certificate is issued, you must install it on your hosting server.

Steps to Install the SSL Certificate in WebSocle‑cPanel

1. Return to cPanel dashboard.
2. Go to SSL/TLS Certificate under the Security section.
3. Click Certificates.
4. You can either paste the certificate encryption code or upload it.
5. Important:
• If pasting the certificate ciphertext: open it to your computer, copy the entire ciphertext, paste it into the field, then click Save Certificate.
• If uploading the certificate file, browse it from your computer, then click Upload Certificate.
6. Click Install on the right of your computer screen.
7. You will be redirected, click Install Certificate on the bottom of the page.

cPanel will automatically bind the certificate to your domain and activate HTTPS.

Verification

After installation:

• Go to SSL/TLS Certificate under the Security section.
• Click Status.
• Confirm the issuer and the validity period.

Your new SSL certificate is now fully active on your WebSocle hosting environment.

Final Notes

• WebSocle automatically provides free Let’s Encrypt SSL certificates, but commercial SSL certificates offer stronger validation and trust levels.
• Always generate your CSR on the same server where the certificate will be installed.
• Never share your private key, WebSocle’s cPanel keeps it secure.

If you change your domain or hosting server, you must repeat this process.