Two ways a certificate gets onto your account.
AUTOSSL
Issued, installed and renewed automatically. No action from you after the first run. Domain validated.
This is right for almost every site.
MANUAL INSTALLATION
You obtain a certificate elsewhere, generate a signing request, receive the certificate, and install it through cPanel > SSL/TLS > Manage SSL sites.
Necessary for organisation validated, extended validation, and some wildcard certificates.
THE TRADE-OFF
A manually installed certificate does not renew itself. You must remember, generate a new request, obtain a new certificate and install it, every year.
A forgotten renewal produces a browser warning on every visit until fixed. This happens regularly and is entirely avoidable by using AutoSSL where possible.
IF YOU INSTALL ONE MANUALLY
Exclude the domain from AutoSSL to avoid conflict Note the expiry date in a calendar with a reminder a month before Install the intermediate bundle alongside the certificate
THE RECOMMENDATION
Use AutoSSL unless a specific requirement prevents it.
