An SSL certificate is valid only for the hostnames included in its certificate names. A certificate that secures example.com does not automatically prove that every subdomain is covered.
- Open cPanel SSL/TLS Status or SSL/TLS Certificates and inspect the certificate for each hostname.
- Confirm the hostname resolves to the server where that certificate is installed.
- Compare the root domain,
www, and any affected subdomain separately. - If AutoSSL is used, check whether the hostname is included or excluded and whether cPanel reports a validation problem.
- Do not enable a forced HTTPS redirect until a valid certificate is active for the hostname.
A browser hostname-mismatch warning is a certificate-name problem, not a reason to bypass the browser warning permanently.
