Security and SSL

Automatic SSL certificates for domains and subdomains

Reviewed on 2 min read SSL HTTPS Let's Encrypt

Hosting services use AutoSSL to request free certificates for the account's eligible domains and subdomains.

AutoSSL tries to install and renew them automatically. Each name must pass domain control validation and must not be excluded; DNS, CAA records, proxies and the certificate authority's limits can also affect issuance.

Check each name's coverage in cPanel > SSL/TLS Status before enabling redirects. Accessing via https:// encrypts the connection when the server presents a valid certificate for that name.

From certificate to a website that uses HTTPS

  1. Add the domain to the hosting and check that DNS allows the name to be validated.
  2. Open SSL/TLS Status and review the domain, www and the subdomains you use.
  3. Test a page over HTTPS before enabling redirects. The certificate must be valid for that name.
  4. Set the secure address in the application and redirect HTTP visits to HTTPS.
  5. Check internal pages, forms and images.

These are separate steps: having a certificate does not make the application generate HTTPS links, and enabling a redirect does not issue the certificate.

Below you will find the settings needed to use HTTPS in the most common apps:

If a warning still appears

If the browser rejects the certificate, check the name, coverage and destination server. If the certificate is valid but the page loads HTTP resources, check for mixed content

AutoSSL automates issuance and renewal, but it does not guarantee universal coverage or trouble-free renewal. Keep DNS and validation reachable and check SSL/TLS Status if a name is left unprotected.

You may also find useful

Something wrong or out of date? Tell us and we will review it.