The SSL certificates page was updated a few weeks ago, with an interface which should make the process more clear, as well as some technical cleanup. However, this release went quite badly, as we announced here:
The DNS records table was misleading before, but was already fixed before your post.