On KeetonHosting hosting

Nothing to do — SSL is auto-issued, auto-installed, and auto-renewed. Portal → Hosting → Manage → SSL confirms status.

On external servers

1. Generate a CSR on your server (openssl req -new -newkey rsa:2048 -nodes -keyout site.key -out site.csr).
2. Paste the CSR into Portal → SSL → Manage → Rekey/Install.
3. Complete domain control validation (HTTP file, DNS TXT, or email).
4. Download the issued certificate bundle.
5. Install cert + chain + private key in your web server (nginx, Apache, IIS).