You can retrieve a previously generated certificate signing request from cPanel when a certificate order needs it again. Choose the request associated with the intended domains and key rather than creating unnecessary new requests.
IN THIS ARTICLE
01 What you need before you begin
Have the certificate order details and intended hostname list available. Confirm whether the issuer expects the original CSR or a new request for reissue. A CSR is not the private key and cannot replace a missing private key.
02 Find and copy an existing CSR in cPanel
- Open SSL/TLS and Certificate Signing Requests, or use the unified SSL/TLS Certificates Requests tab.
- Find the request by its domain, creation time and description. Choose its Edit or view action.
- Review the decoded request details, then copy the complete encoded CSR including the boundary lines.
- Paste it into the issuer’s intended CSR field without introducing extra text, word-processing formatting or missing line breaks.
- Retain the request’s relationship to the matching private key and certificate order in your secure administration records.
03 Confirm the expected result
The issuer should recognise the request and show the expected hostname or identity details. Double-check the certificate product’s full coverage before approving issuance.
04 Check a CSR before submitting it for a certificate
A Certificate Signing Request is not the issued certificate and it is not the private key. Send only the CSR when the certificate order asks for one. The private key must remain protected because it is used by the server to prove control of the certificate identity.
Copy the full request including its boundary lines, without adding quotation marks or converting line breaks into literal \n characters. The structure should look like this, with your actual encoded request between the boundaries:
-----BEGIN CERTIFICATE REQUEST-----
[Your complete CSR data]
-----END CERTIFICATE REQUEST-----This is a format illustration, not a usable CSR. Do not submit the placeholder text. Check the requested hostname and any certificate-order fields before proceeding. Keep a record of where the corresponding private key was generated so that the issued certificate can be installed with the matching key.
What if I cannot locate the matching key?
Do not substitute an unrelated key or email private keys to multiple people. Review the certificate provider's reissue process and generate a new CSR/key pair where appropriate. Contact us with the hostname and order reference for guidance, without including private-key material.
What if I cannot find the CSR or its matching private key?
If the CSR is not present, determine whether it was generated on another server or account. If its private key is lost, retrieving the CSR alone will not allow installation of a matching certificate. Generate a new key and CSR and follow the issuer’s reissue process when necessary.