An eligible cPanel website can use the server’s AutoSSL service to obtain and renew a domain-validated certificate. HTTPS protects the connection to the website; it does not remove malware or make an unsafe application trustworthy.
IN THIS ARTICLE
What you need before you begin
Add the real domain to hosting and point its relevant A and AAAA records to the intended service. You must control the domain and allow the certificate authority’s validation request. An unrelated IPv6 address, restrictive CAA record or inaccessible validation path can prevent issuance.
01 Enable and check the available certificate
- Open SSL/TLS Status or the unified SSL/TLS Certificates Status tab and locate the exact hostnames visitors use, including the www name if needed. Read the certificate status and expiry rather than relying only on an icon.
- Confirm the required hostnames participate in AutoSSL through the available controls or support. The unified Status tab hides AutoSSL actions. If a valid certificate already covers them, do not repeatedly request another certificate.
- Use Run AutoSSL if that control is available. Allow the job to finish, then refresh the status and read any domain-specific validation error.
- After HTTPS works directly, enable the appropriate HTTPS redirect for the site and update application URLs where necessary. Test first if a CDN or reverse proxy also controls HTTPS.
Check the HTTPS result
Visit each intended hostname over HTTPS in a private browser window. Inspect the certificate name and expiry, then check for mixed-content requests in the browser’s developer tools.
What should I do if AutoSSL cannot validate the domain?
There is no guaranteed issuance time or unlimited number of retries. If validation fails, correct the reported DNS or accessibility problem before trying again. Send support the hostname and exact error; never send a private key.