In CWP admin go to "SSL certificates" in the section "WebServer Settings". Click on "Admin services" near the domain name you want to enable SSL for, check all options "mail, webmail, cpanel, ftp", click on "Apply changes".
All subdomains (cpanel.domain.com, webmail.domain.com, ftp.domain.com, mail.domain.com) must be pointed to your server.