# How do I start?

**URL:** <https://community.letsencrypt.org/t/how-do-i-start/103599>\
**Category:** Help\
**Created:** [October 7, 2019, 6:58pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599 "2019-10-07T18:58:52Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Suchi](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Suchi](https://community.letsencrypt.org/u/Suchi)\
**Post date:** [October 7, 2019, 6:58pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/1 "2019-10-07T18:58:52Z")

</div>

Sorry for such a basic question, this is my first time installing SSL. My webserver gave me a CSR and told me to give this to Let’s Encrypt to get the certificate and Private Key. How do I do this? I provided a server information screen shot below. Thank you.

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:  
[lottelehmannleague.org](http://lottelehmannleague.org)  
I ran this command:  
none  
It produced this output:  
none  
My web server is (include version):  
I don’t know  
The operating system my web server runs on is (include version):  
See screenshot below  
My hosting provider, if applicable, is:  
Site5  
I can login to a root shell on my machine (yes or no, or I don’t know):  
No, using Shared Hosting  
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):  
cPanel 70.0 (build 69)  
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot):  
I don’t know

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/2/d/2d0257bd80f41acf9391fb17dbf12f024822660e.png)

---

<div class="post-metadata">

**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\
**Post date:** [October 7, 2019, 7:31pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/2 "2019-10-07T19:31:24Z")

</div>

Hi @Suchi

> [@Suchi](#):
>
> I can login to a root shell on my machine (yes or no, or I don’t know):  
> No, using Shared Hosting  
> I’m using a control panel to manage my site (no, or provide the name and version of the control panel):  
> cPanel 70.0 (build 69)

if you use shared hosting and cPanel, then check your cPanel if there is an integrated solution.

If yes, that's the best option.

Then you don't need an own client. And you may not install an own created certificate.

But that's not required if your cPanel supports Letsencrypt certificates.

---

<div class="post-metadata">

**Author:** ![Suchi](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Suchi](https://community.letsencrypt.org/u/Suchi)\
**Post date:** [October 7, 2019, 7:37pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/3 "2019-10-07T19:37:05Z")

</div>

Thank you for replying. I contacted my web server and asked if they support Let’s Encrypt. They said yes, but I have to get the certificate myself, and then they will help install it. Then gave me a CSR and told me to give it to Let’s Encrypt to get a SSL certificate and Private Key. They told me to download those files when I get them, and then upload them to my home directory on the server. Am I supposed to use certbot?

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [October 7, 2019, 7:43pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/4 "2019-10-07T19:43:32Z")

</div>

> [@Suchi](#):
>
> Thank you for replying. I contacted my web server and asked if they support Let’s Encrypt. They said yes, but I have to get the certificate myself, and then they will help install it. Then gave me a CSR and told me to give it to Let’s Encrypt to get a SSL certificate and Private Key. They told me to download those files when I get them, and then upload them to my home directory on the server.

This is not a recommended way to use Let's Encrypt. The suggested way to use it is with automated client software, normally running on the web server itself.

There are ways that you can use a CSR to get a Let's Encrypt certificate, but all Let's Encrypt certificates are valid for only 90 days, so you would have to repeat the process frequently and would probably not have a good experience.

Typically, only the system administrator of the server can usefully install a client like Certbot on the server, so this isn't a convenient solution for shared hosting environments.

Instead of using the CSR to obtain the certificate manually, I would suggest one of

- getting your web host to add native Let's Encrypt support,
- switching web hosts to one with better Let's Encrypt support, or
- buying a paid certificate from another CA.

---

<div class="post-metadata">

**Author:** ![Suchi](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Suchi](https://community.letsencrypt.org/u/Suchi)\
**Post date:** [October 7, 2019, 7:48pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/5 "2019-10-07T19:48:01Z")

</div>

I see. Thank you for taking the time to explain. When I asked my server customer support if they supported Let’s Encrypt, they said yes – so I assumed they would manage the whole thing. You are correct, I don’t want to go through this every 90 days. I will check back with them with the feedback you provided. Thank you again.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [October 7, 2019, 7:54pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/6 "2019-10-07T19:54:18Z")

</div>

You can compare with

> [@Web Hosting who support Let's Encrypt](https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920):
>
> I…

Most providers listed here support Let's Encrypt _automatically_, without requiring the subscriber to do anything. The ability to import an externally-obtained certificate doesn't quite rise to the level of "support" by the standards of this list. 🙂

---

<div class="post-metadata">

**Author:** ![Suchi](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@Suchi](https://community.letsencrypt.org/u/Suchi)\
**Post date:** [October 7, 2019, 7:57pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/7 "2019-10-07T19:57:06Z")

</div>

Understood. Looks like I will simply have to pay for a certificate. I just finished chatting with my server and they confirmed they can only install a certificate that I obtain, and then repeat as needed.

Thank you again.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 6, 2019, 7:57pm UTC](https://community.letsencrypt.org/t/how-do-i-start/103599/8 "2019-11-06T19:57:13Z")

</div>

Closed on November 6, 2019, 7:57pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
