AutoSSL domain-control validation depends on the domain being reachable and correctly delegated. cPanel SSL/TLS Status can flag domains with AutoSSL problems, including domains that do not resolve to an IPv4 address on the internet.
- Confirm the domain’s public DNS points to the intended hosting server.
- Check that the domain is included in AutoSSL rather than excluded.
- Review the certificate status/error shown in SSL/TLS Status.
- Check CAA records for restrictions that could prevent the configured certificate authority from issuing a certificate.
- After DNS is corrected and caches have updated, run AutoSSL from the available cPanel interface when that action is enabled.
Repeatedly running AutoSSL while DNS still points elsewhere does not correct the underlying validation problem.
