Installing Cloudflare SSL on cPanel

If you do not want to purchase a commercial certificate or use the free Lets Encrypt SSL, you can install Cloudflare SSL on your hosting plan. In this lesson, you will learn how to do this.
1) Log in to your Cloudflare system, select your domain. Click on the SSL/TLS icon -> Pick Origin Server tab -> Click Create button:

2) Settings should be the following:
Generate private key and CSR with Cloudflare;
Make sure your domain is indicated in Hostnames;
Certificate Validity 15 years (Optional).
Click Create button:

3) Copy-paste Origin Certificate and Private Key. You will need this information to install SSL on your server. The Key format should be PEM:

4) You will also need CA Bundle to establish the full chain of trust. You can download the Cloudflare CA root certificate on this page. You will see two options there:
Cloudflare Origin ECC PEM (do not use with Apache cPanel)
Cloudflare Origin RSA PEM <- THIS IS THE ONE YOU NEED TO DOWNLOAD
As a result, you will have 3 pieces of SSL:
1) Private Key;
2) Certificate or CRT (Origin Certificate);
3) Certificate Authority Bundle or CABUNDLE (Cloudflare Origin RSA PEM).
The SSL installation on cPanel takes place according to this tutorial.
IMPORTANT
For SSL to work correctly, you will need to make sure that your domains type A record is Proxied on your Cloudflare DNS zone:

Also, you will need to enable Full (strict) SSL/TLS encryption in Cloudflare SSL/TLS -> Overview section:

Thats it! Congrats on installing Cloudflare SSL for your domain:




Installing a certificate on the shared hosting
1. Choose Services > Web Hosting and then choose your Shared Hosting package and select SSL/TTL Status. If any certificate is already installed, press Exclude from AutoSSL:

2. Go back to the main menu and select SSL/TTL. Click on the last link Manage SSL sites and select a domain:

3. Go down to the paragraph Install an SSL Website:

4. Paste all saved keys. If CRT is correct you will see this notification:

5. After pasting just press a button Install Certificate. If everything goes correctly, you see this message:

6. Once this is done, you will have to wait a bit and your certificate will be installed. You will be able to check it with 3rd party tools like https://www.sslshopper.com/ssl-checker.html