You almost never need to generate a CSR on Flashcloud hosting. Every domain gets a free Let's Encrypt SSL certificate that's issued automatically about 5 minutes after DNS points to us, and renewed automatically after that. A CSR (certificate signing request) is only necessary if you're buying a certificate from a third-party certificate authority that requires one, such as an EV or OV certificate for a business that needs extended validation, or a certificate your company's security team is mandating separately from hosting.
If that's your situation, generate the CSR from SSL/TLS Certificates in cPanel.
Generate a CSR in cPanel
Log in to cPanel and open SSL/TLS Certificates, then find the CSR generation option.
Fill in the fields:
- Key: pick an existing private key or let cPanel generate a new one
- Domains: the exact domain(s) the certificate will cover, e.g.
yourdomain.comorwww.yourdomain.com - City, State, Country: your organization's legal address, used for OV/EV validation
- Company, Company Division: your registered business name and department (leave blank for domain-validated certs that don't need them)
- Email: an address the CA can reach you at
Submit the form. cPanel generates the CSR, formatted in the standard CSR block format. Copy the whole block, including the begin and end lines.
Submit the CSR to your certificate authority
Paste the CSR into your CA's order form when they ask for it. The CA extracts your domain and organization details from it and uses it to build the certificate. Don't regenerate the CSR after submitting; the private key tied to it has to match the certificate that comes back, or installation fails.
The CA will validate ownership (domain, organization, or extended, depending on certificate type) and then issue the certificate, usually as a .crt file plus one or more intermediate/bundle certificates.
Install the certificate once it's issued
Back in SSL/TLS Certificates, use the certificate install screen. Paste the certificate the CA sent you into the certificate field, and paste the CA bundle (intermediate certificates) into its own field, then submit to install it.
Check that the certificate actually applied by loading your site over https:// and confirming the padlock shows the new certificate's details in the browser.
Why most sites don't need this
Free Let's Encrypt SSL is domain-validated, auto-issued, and auto-renewed for every hosted domain. Paid CSR-based certificates only add value when you specifically need organization or extended validation (the green business-name display some browsers used to show), or a vendor/compliance requirement names a specific CA.
If something goes wrong
A mismatched private key, an expired CSR, or a certificate issued for the wrong domain are the most common install failures, and they all show up as an error when you try to install in SSL/TLS Certificates. If installation keeps failing, open a ticket from the portal at Support. It reaches a real person, not a bot, and they can check the certificate chain and key match directly on the server.