What SSL/TLS and HTTPS Do for a Website SSL/TLS encrypts traffic between a client and a server. For websites, this is what allows a... How to Use the Current cPanel SSL/TLS Interfaces Current cPanel versions can present certificate tools in more than one layout. On cPanel 134 and... How to Check SSL Certificate Status for Your Domains Use cPanel → Security → SSL/TLS Status, or the equivalent Status tab in the unified SSL/TLS... What Is AutoSSL in cPanel? AutoSSL is cPanel & WHM functionality that can automatically provision and renew... How to Run AutoSSL Manually in cPanel If AutoSSL actions are enabled for the account, you can request an AutoSSL run from cPanel →... How AutoSSL Certificate Renewal Works AutoSSL periodically checks eligible certificates and attempts renewal before expiration. Current... Understanding AutoSSL Domain-Control Validation Before an AutoSSL provider can issue a certificate, it must verify control of the hostname. This... Secure IMAP, POP3, and SMTP Settings for cPanel Email cPanel recommends using encrypted SSL/TLS connections for mail clients. ProtocolSecure... Why Correct DNS Matters for AutoSSL SSL issuance and DNS are closely related. AutoSSL can only validate hostnames that meet the... Troubleshooting Common AutoSSL Failures AutoSSL failures are usually more useful when treated as validation errors rather than generic... Understanding DV, OV, EV, AutoSSL, and Self-Signed Certificates cPanel can display several certificate types in SSL/TLS Status. AutoSSL DV Certificate — a... Why Browsers Warn About Self-Signed SSL Certificates A self-signed certificate encrypts traffic but is not signed by a certificate authority that... How to View SSL Certificate Details in cPanel Use SSL/TLS Status or the certificate-management interfaces to inspect a domain's certificate.... How to Install an SSL Certificate Manually in cPanel When the SSL/TLS interface is enabled, cPanel can install a certificate manually for a hosted... How to Force HTTPS Redirect for a Domain in cPanel The Force HTTPS Redirect control sends visitors from the insecure HTTP version of a domain to its... What Is a CA Bundle or Certificate Chain? A website certificate is often part of a chain that links the site certificate to an intermediate... Understanding SSL Private Keys in cPanel An SSL private key is the secret half of the public/private key pair used by a certificate. It... How to Generate an SSL Private Key in cPanel Use cPanel → Security → SSL/TLS → Private Keys (KEY) when manual key generation is required. Open... How to Protect SSL Private Keys Treat an SSL private key like a high-value credential. Do not paste it into public tickets, chat... What Is a Certificate Signing Request (CSR)? A Certificate Signing Request (CSR) contains information used when requesting a certificate from... How to Generate a CSR in cPanel Use cPanel → Security → SSL/TLS → Certificate Signing Requests (CSR) when a certificate authority... Choosing the Correct Hostname for a CSR and Certificate The certificate must cover the hostname visitors or applications actually use. For example,... How to Manage Certificates (CRT) in cPanel The Certificates (CRT) section of cPanel's SSL/TLS tools stores certificate data that can be used... RSA vs. ECDSA SSL Keys in cPanel Current cPanel & WHM supports RSA and ECDSA as preferred SSL/TLS key types. RSA is widely... How to Change the Default SSL/TLS Key Type in cPanel When the option is enabled, cPanel → Security → SSL/TLS includes Default SSL/TLS Key Type. Open... Understanding TLS 1.2 and TLS 1.3 in cPanel Current cPanel & WHM supports TLS 1.2 and TLS 1.3 and no longer supports protocol versions... Troubleshooting an Expired SSL Certificate An expired certificate is no longer within its valid date range and browsers can warn visitors... Troubleshooting an SSL Hostname Mismatch A hostname mismatch occurs when the requested hostname is not included in the certificate... Troubleshooting an Untrusted SSL Certificate Warning A browser can reject a certificate even when encryption is technically active. Common causes... Troubleshooting Mixed Content on an HTTPS Website Mixed content occurs when an HTTPS page loads one or more resources over insecure HTTP. The page... How CAA Records Control SSL Certificate Issuance A CAA (Certificate Authority Authorization) record tells certificate authorities which CAs are... Understanding HTTP-to-HTTPS Redirects After SSL Is Installed An SSL certificate allows HTTPS, but it does not automatically guarantee that every HTTP request... Understanding SSL Coverage for Root Domains, www, and Subdomains Certificates cover specific DNS hostnames. The root domain, www, and other subdomains are... Why a Browser Can Show the Wrong Server Certificate If DNS points a hostname to a different server, the browser can receive that other server's... When to Delete Old Certificates and Private Keys in cPanel Old certificate material can accumulate in cPanel, but deletion should be deliberate. Before... Diagnosing HTTPS That Works on One Hostname but Not Another An SSL certificate is valid only for the hostnames included in its certificate names. A... Diagnosing AutoSSL When a Domain Does Not Resolve Correctly AutoSSL domain-control validation depends on the domain being reachable and correctly delegated.... Diagnosing a Force HTTPS Redirect Option That Is Unavailable cPanel’s Domains interface can force HTTP requests to HTTPS, but the option is available only... Checklist Before Making SSL or Security Changes Before changing a live website's certificate or security configuration: Identify the exact domain...