Current cPanel & WHM supports RSA and ECDSA as preferred SSL/TLS key types.
- RSA is widely compatible and certificate authorities require RSA keys to be at least 2,048 bits.
- ECDSA uses smaller keys for comparable cryptographic strength and can provide faster signing and handshake operations, but older-client compatibility may differ.
Choose the key type based on the clients that must connect and the requirements of the certificate authority. Avoid changing key types merely because one number appears larger than another; RSA and ECDSA key sizes are not directly comparable.
