Security and SSL
Automatic SSL certificates for domains and subdomains
Hosting services use AutoSSL to request free certificates for the account's eligible domains and subdomains.
AutoSSL tries to install and renew them automatically. Each name must pass domain control validation and must not be excluded; DNS, CAA records, proxies and the certificate authority's limits can also affect issuance.
Check each name's coverage in cPanel > SSL/TLS Status before enabling redirects. Accessing via https:// encrypts the connection when the server presents a valid certificate for that name.
From certificate to a website that uses HTTPS
- Add the domain to the hosting and check that DNS allows the name to be validated.
- Open SSL/TLS Status and review the domain,
wwwand the subdomains you use. - Test a page over HTTPS before enabling redirects. The certificate must be valid for that name.
- Set the secure address in the application and redirect HTTP visits to HTTPS.
- Check internal pages, forms and images.
These are separate steps: having a certificate does not make the application generate HTTPS links, and enabling a redirect does not issue the certificate.
Below you will find the settings needed to use HTTPS in the most common apps:
If a warning still appears
If the browser rejects the certificate, check the name, coverage and destination server. If the certificate is valid but the page loads HTTP resources, check for mixed content
AutoSSL automates issuance and renewal, but it does not guarantee universal coverage or trouble-free renewal. Keep DNS and validation reachable and check SSL/TLS Status if a name is left unprotected.
You may also find useful
- Force HTTPS from cPanel Enable the HTTPS redirect with a valid certificate and find out what to do if the toggle does not ap...
- Force secure access via HTTPS Explains how to enable the HTTPS redirect after checking the certificate and provides an .htaccess r...
- Diagnose an invalid SSL certificate Tell apart a wrong name, expiry and the chain of trust; check the DNS destination and the AutoSSL st...
- Enable HSTS gradually Explains the requirements and risks of HSTS and how to add the header gradually, only on HTTPS respo...
Something wrong or out of date? Tell us and we will review it.