Please fill out the fields below so we can help you better.
My operating system is (include version):ModSSL/WHM n/a
My web server is (include version): Apache n/a
My hosting provider, if applicable, is: Crazy Domains
I can login to a root shell on my machine (yes or no, or I don’t know): Don’t know
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Yes Cpanel
My hosting provider is asking for the certificate zip file to install and says they don’t use SSH to install certificates. I have never installed SSL before and don’t know how to get it. Can I get the certificate file somewhere or do I have to have SSH access to run some commands to generate it?
Having SSH access and being able to install client software is normally better, since it allows you to make renewals automatic. However, not having appropriate access is not the end of the world, as long as you are able to either create verification files on your server or edit your domain DNS records.
You can for example run a client on another machine and then copy the certificate to your server or hand it over to your provider as they asked you to (if you are going to use DNS verification, then it is supported by Perl, go and bash clients afaik)
If running the client on another machine is not an option, then you can try using the Certificate Wizard on https://ZeroSSL.com (you will not need to install anything but you would still need to be able to verify your domain ownership by using either HTTP or DNS verification).
Thank you for this, I used zero SSL and it worked fine. However I have an insecure warning on the site and an x next to the padlock. Also when browsing to www.****.com I get the warning then and says certificate not valid for this. Says it was valid only for ****.com. Even though it redirects without the www. So when I go through the process on zero SSL should I add in all the domain variants ie with www. and without and http:// + https://?
Glad it helped. And yes, you need to create a certificate containing both names (with and without www). ZeroSSL Cerififcate Wizard actually asks whether you want to add www-prefixed version if you enter only one name without www. You can list up to 100 domains on one certificate (just keep in mind that they are all going to have to pass the verification process).
As for that warning - I believe you meant that it appears (with that x next to padlock) on your site, even though the certificate is installed. Normally that is because you are loading some insecure content (via http://) on your page, such as images, iframes, etc. Just make sure that everything on the page loads up using HTTPS and it will be fine.