A website certificate is often part of a chain that links the site certificate to an intermediate certificate and ultimately to a trusted root certificate authority.
A CA bundle contains the intermediate certificates needed for clients to build that chain. When manually installing a certificate, cPanel can often determine the appropriate bundle, but manually issued certificates may require the supplied CA bundle.
An incomplete chain can cause trust errors in some browsers or clients even when the site certificate itself has not expired.
