SSL/TLS Status: check a domain's certificate

From SSL/TLS Status you can see which certificate covers each domain and subdomain, when it expires, when AutoSSL last ran and whether there is a validation problem.

Find the name that fails

1. Open cPanel and go to SSL/TLS Status.
2. Search for the exact domain. Check the root domain, www and the subdomains you use separately.
3. Check the coverage, the expiry and any validation message.

A valid certificate for the root domain does not prove that it covers all its subdomains.

AutoSSL statuses

• Included: AutoSSL will try to include the name in its next runs.
• Excluded: AutoSSL will not request or renew coverage for that name.
• Unsecured or Problems: the name has no valid certificate or cPanel has logged a failure you should review.

In versions that offer Include during AutoSSL or Exclude from AutoSSL, use those actions only when you deliberately want to change the name's participation. In recent versions they may not appear; contact us if you need to adjust the coverage. Excluding it may reduce the coverage of the next certificate and leave it without automatic renewal.

Run AutoSSL

If your version shows Run AutoSSL, request a check of the whole account, not just the selected domain. Use it after fixing the cause and when no other run is in progress. If the button does not appear, contact us so we can review the automatic run and its errors.

From cPanel 134, the status may appear as a tab in SSL/TLS Certificates, depending on the server configuration.

Check the result, not just the start of the task

AutoSSL is asynchronous: wait for it to finish and check the status again. If cPanel shows a valid certificate but the browser still sees another, check the public DNS and any proxy or CDN, because the visitor may be reaching a different server.

If a validation failure appears, keep its text and check the name's DNS, the access the validation needs and any CAA restrictions. Fix the cause before starting another check; repeating the task does not fix incorrect DNS.

If you need help, give us the affected name, the error and when you checked it. When the coverage is valid, continue with enabling HTTPS.