In this four-part article, you will learn how to generate a CSR code and install an SSL Certificate on VestaCP (control panel). Part one and two will discuss in great detail CSR generation and SSL installation steps, while the final two segments will focus on VestCP features and the best place online to shop for affordable SSL certificates.

If you’ve already generated the CSR code and applied for an SSL certificate, feel free to skip part one and head straight to the installation guidelines. Use the links below to jump between sections.

Generate a CSR code on VestaCP
Install an SSL Certificate on VestaCP
Test your SSL installation
VestaCP features and versions
Where to buy the best SSL certificate for VestaCP?

Generate a CSR code on VestaCP

All commercial SSL certificates require CSR generation prior to ordering. CSR stands for Certificate Signing Request, a block of encoded text containing your contact data. To create your CSR code on VestaCP, perform the following:

  1.  Log into your VestaCP dashboard and select the WEB tab at the top of the page
  2. Select the domain you want to secure and click Edit
  3. On the Editing Domain page, enable SSL  Support and click Generate CSR
  4. Fill in the required fields as shown below:
    • Domain: provide the FQDN (fully-qualified domain name) you want to protect. For example, If you have a wildcard certificate ad an asterisk (*) in front of the domain name. For instance, *
    • Email: enter a valid email address
    • Country: enter the two-letter code of your country. For example, US
    • State/Province: indicate the state where you or your company is located. For instance, California
    • City/Locality: submit the city where you or your company is located. For example, San Jose
    • Company: specify the full legal name of your company (e.g., Your Company LLC). If you have a Domain Validation certificate, enter NA instead.
  5. Double-check the info you’ve just provided, then click OK
  6. You will see three boxes:
    • SSL CSR – the certificate signing request you’ll need during the SSL order
    • SSL Certificate – a self-signed certificate which you don’t need
    • SSL Key – the private key which is required for the SSL installation. Make sure you save the private key in a separate plain text file on your local computer or server
  7. Open your CSR with any text editor such as Notepad and copy its contents into the corresponding box during the SSL order process.

Install an SSL Certificate on VestaCP

After your CA sends the necessary SSL files to your inbox, download the ZIP folder and extract its contents on your local computer. Here’s what you’ll need to complete the SSL installation:

  • Your primary SSL Certificate with .crt extension issued for your domain.
  • Your private key file generated along with the CSR code
  • A CA Bundle containing Intermediate and Root certificates for better browser compatibility

Once the installation files are ready, please perform the following:

  1. Log into your VestaCP dashboard and select the WEB tab
  2. Select the domain you want to secure and click Edit
  3. On the Editing Domain page, make sure the SSL Support option is checked
  4. Leave the Let’s Encrypt Support option unchecked
  5. Fill in the fields below with their corresponding SSL files:
    • SSL Certificate: paste your primary SSL certificate
    • SSL Key: paste your private key
    • SSL Certificate Authority/Intermediate: enter your CA Bundle
  6. Scroll down the page and click Save.

Congratulations, you’ve successfully installed an SSL certificate on VestaCP.

Test Your SSL installation

After you install an SSL Certificate on VestaCP, you should run a quick test and check your new SSL certificate for potential errors and vulnerabilities. We have an entire article on our blog, describing the best SSL tools to scan your SSL installation.

VestaCP features and versions

VestaCP is a free, open-source web hosting control panel that allows users to manage multiple websites, email accounts, FTP accounts, DNS records, MySQL databases, and more.

Vesta CP is written in bash, the native programming language of Linux server administrators. It features a php/javascript web interface and a CLI interface.

At the time of writing this article, the latest VestaCP release is Version 0.9.8-23 in September 2018. Here is the full history.

Where to buy the best SSL Certificate for VestaCP?

When buying an SSL Certificate, you should pay close attention to the validation type, price, and customer service. At SSL Dragon, we offer the widest range of SSL certificates, the best prices, and, of course, impeccable customer support! Our SSL certificates are issued by reputable Certificate Authorities and are compatible with VestaCP. Whether you need an affordable Domain Validation certificate or a premium Extended Validation product we’ve got you covered. Here’s our full list of SSL certificate types:

If you don’t know what type of SSL certificate to choose, use our SSL Wizard and Certificate Filter tools. They will recommend the ideal SSL product for your website.

If you find any inaccuracies, or you have details to add to these SSL installation instructions, please feel free to send us your feedback at [email protected]. Your input would be greatly appreciated! Thank you.