How To Generate CSR & Activate SSL On Namecheap Domain Easily 2026

After purchasing an SSL certificate, it doesn't do anything until you activate it. In your Namecheap account, open SSL Certificates from the left menu, and any certificate you've bought — PositiveSSL in this case — shows up in a list with its status, purchase date, and time remaining.

A freshly purchased certificate is flagged New, with an explicit note that you need to activate it and then install it before it protects anything. Click Activate to start the process.

A CSR is generated together with a private key, and the two are a matched pair — the certificate only works with the exact key it was issued alongside. Using a CSR generator tool, you'll get three outputs in separate tabs: the CSR itself (what you submit to the certificate authority), the private key (what your server or hosting panel needs to actually use the certificate), and eventually the signed certificate. The tool is explicit that it does not store private keys and that losing yours means reissuing the certificate entirely, so copy it somewhere secure the moment it's generated rather than planning to come back for it later.

Back in Namecheap's activation wizard, step 1 of 4 asks you to paste the CSR you just generated into the Enter CSR field, then confirms the primary domain it covers underneath. Namecheap flags that reusing an old CSR for a renewal is a security risk and recommends generating a fresh one each time, which is worth following even though it's tempting to reuse a saved CSR to save a step. Once the CSR is pasted and the domain confirmed, click Next to move into choosing how you'll prove you own the domain.

The next steps in the wizard ask how you want to prove domain ownership — commonly email validation, sent to an address like admin@ or webmaster@ your domain, or DNS validation, where you add a specific TXT or CNAME record to your domain's DNS. Email is usually faster if you already have a working inbox on the domain; DNS validation is more reliable when that mailbox doesn't exist yet, since it works entirely inside the DNS panel you already have open.

If you choose DNS validation, go to Domain List → Manage → Advanced DNS for the domain and open Host Records. This is the same panel where any existing records — like an existing URL redirect or A record — already live, and adding a new one means picking the correct record type from the dropdown (CNAME, TXT, and so on) before entering the exact host and value Namecheap's wizard gave you. Save the change, then return to the SSL wizard to trigger verification; it will check the DNS record rather than an inbox.

After validation succeeds, Namecheap issues the certificate, and you'll download or copy it from the Certificate tab of the same tool you used for the CSR. Installation happens on your hosting side, not in Namecheap itself — in cPanel or EasyWP, there's typically an SSL/TLS section where you paste the certificate and the matching private key together. This is exactly why the private key from step two matters: without it, the certificate you just received can't actually be installed anywhere.

If activation stalls or fails, the usual culprits are a CSR that doesn't match the domain entered in the wizard, a DNS or email validation step left incomplete, or a validation record that was added with the wrong type or a typo in the value. Double-check the domain in the CSR against the one you're activating for, and confirm the DNS record shows up correctly using a DNS lookup tool before assuming Namecheap's system is at fault — propagation delays on a freshly added record are a common false alarm.