Hosting panels without automation — renew by hand

These panels have no tool a script on the hosting could use to install a certificate by itself (or it is not publicly documented). So the new certificate is installed by hand: 3–5 minutes once every few months. We will email you as soon as a new part of the subscription is ready, with a link to this page.

What to paste

Open your link from the account in a browser and copy the text:

Certificate (CRT) — https://api.zrazu.com/ssl-pull/zsp_YOUR_TOKEN/cert.pem;
Chain / CA bundle / intermediates — https://api.zrazu.com/ssl-pull/zsp_YOUR_TOKEN/chain.pem;
if there is a single field for everything ("certificate with chain", "fullchain") — https://api.zrazu.com/ssl-pull/zsp_YOUR_TOKEN/fullchain.pem;
Private key — your key, the same as last time. Many panels remember it themselves.

Where it is in the panel

The Ukrainian panels show these menus in Ukrainian, so the menu paths are given as they appear, with an English translation in brackets.

Panel / hosting	Menu path
adm.tools (hosting.ua, ukraine.com.ua)	Хостинг → Мої сайти → сайт → Налаштування SSL → «Ваш сертифікат» (Hosting → My sites → site → SSL settings → "Your certificate"). Paste the certificate with the chain (`fullchain.pem`) or turn on "add intermediates". RSA keys only. Changes take effect in 15–30 minutes
Cityhost (Hosting 2.0)	SSL → add your own certificate → paste the certificate and key
Mirohost	Сервер → SSL-сертифікати → Імпорт сертифіката (Server → SSL certificates → Import certificate)
ISPmanager (FreeHost, Tucha, Hostpro and others)	SSL-сертифікати → Створити / Додати → Існуючий (SSL certificates → Create / Add → Existing): certificate, key, chain; then in Сайти / WWW-домени (Sites / WWW domains) choose this certificate
Plesk	Сайти та домени → домен → SSL/TLS-сертифікати → Завантажити (Websites & Domains → domain → SSL/TLS Certificates → Upload)
DirectAdmin (NIC.UA, Tucha and others)	Account Manager → SSL Certificates → Paste a pre-generated certificate and key; the chain — Click Here to paste a CA Root Certificate
Hostinger (hPanel)	Websites → Manage → Security → SSL → delete the current one → Import SSL
Hetzner (konsoleH)	Services → SSL Manager → New Certificate → Import Certificate (key without a password, everything in PEM)

After replacing it, check the site: https://zrazu.com/tools/ssl/example.com/ — it should show a new expiry date.

So the panel does not replace our certificate with a free one

Almost all of these hosts can install a free Let's Encrypt certificate by themselves. If your site's SSL settings have "automatic Let's Encrypt" or "issue Let's Encrypt only" turned on, turn it off for the domain — otherwise the panel may replace our certificate with its own.

How to avoid doing this by hand

The validity of each certificate part gets shorter over the years (under industry rules, down to 47 days in 2029), so manual replacement will become frequent. Fully automatic options:

move to a plan or hosting with cPanel — guide;
a VPS with SSH access — Linux server;
if your hosting gives you SSH and cron (for example, on higher plans), the Linux server script often works there too, as long as the panel reads the certificate from a file. Ask your hosting support where the site takes its certificate from, and copy the AI prompt — it will help adapt the script.

If it did not work

The panel says the key does not match — you pasted the wrong key. You need exactly the one the certificate was ordered with (or reissued with).
The browser complains about an incomplete chain — chain.pem was not pasted, or cert.pem was pasted where fullchain.pem is needed.
The key is ECDSA, but the panel accepts only RSA (adm.tools) — reissue the certificate in your account with an RSA key.