outline

You can use this interface to view, upgrade, or renew your domain's Secure Socket Layer (SSL) certificate. You can also view the domain's certificate details.

 

Caution :

cPanel & WHM support Transport Layer Security (TLS) protocol version 1.2 and Supports Transport Layer Security (TLS) protocol version 1.3 .

• cPanel & WHM only support TLSv1.2 and above. The system enables TLSv1.2 by default.
• All clients support TLSv1.3, which requires OpenSSL 1.1.1 or higher.

 

CAA records in zone file

Certification authority certificate (CAA) records in the domain zone file restrict which certification authorities (CAs) can issue certificates for that domain.

• If no CAA record exists for a domain, any CA can issue a certificate for that domain.
• If conflicting CAA records exist, remove the existing CAA record or add one record for the desired CA.

 

Zone Editor Interface ( cPanel > > Home > > Domain > > Zone Editor ) can manage CAA records. Please read the article for more information about the requirements of CA.

Purchase certificates banner

You can use the banner at the top of the interface to:

• Purchase Certificates (Purchase Certificates) : If you select this setting, the system will SSL/TLS Wizard Interface ( cPanel > > Home > > Security > > SSL/TLS Certificates ).
• Unsecured Unsecured Domains Show (Show Unsecured Domains) : The system displays Filter the list of domains in the Domains table to identify insecure ones. Shows only domains.

 

Caution :

We strongly recommend that you secure all domains visible to your visitors.

Search and filter

Search (Search) text box contains the domain name You can filter the Domains table (Domains table ).

• Update the table by entering all or part of the domain name.
• Click the filter icon to display all available filter settings.

You can choose from the following filters:

domain type

• All (All) — Displays all domains, regardless of type. This is the default search filter.
• Main (Main) — Indicates the main domain. for example:

example.com

www.example.com

 

• Subdomain Domain (Subdomain) — Indicates a subdomain. for example,

store.example.com
www.store.example.com

• Addon Domains Domains (Addon Domains) — Displays addon domains. for example:

addon.com
www.addon.com

• Parked Domains (Parked Domains) — Displays parked domains. for example:

parked.com
www.parked.com

• www and mail domain —Displays the www and mail subdomains. for example:

www.example.com
mail.example.com

• Service Child Domain — Indicates service subdomains (service subdomains ). for example:

cpanel.example.com
whm.example.com
webmail.example.com
webdisk.example.com

• DDNS Domain — Displays Dynamic DNS Domain do. for example,

home.example.com
office.example.com

SSL type

• All (All) — Displays all domains regardless of certificate type. This is the default search filter.
• Unsecured Not (Unsecured) — Displays domains that do not have a certificate.
• Self Indicates domains secured with self-signed . No CA secure self-signed certificate.
• AutoSSL DV Certificate — AutoSSL - Displays domains secured by issued Domain-Validated (DV) certificate do.
• DV Certificate —Indicates domains secured with a DV certificate.
• OV Certificate — Organizational Validation (OV) Certificate ) certificate) displays the secured domain.
• EV Certificate — Extended Validation (EV) Displays domains secured by a certificate.

SSL status

• All (All) — Displays all domains regardless of certificate status. This is the default search filter.
• Active (Active) — Displays domains secured with an active certificate.
• Expired (Expired) — Displays domains with expired certificates.
• Soon Expiring (Expiring Soon) — Displays domains whose certificates will expire soon.
• Unsecured (Unsecured) — Displays domains that do not have a certificate.
• Has AutoSSL Problems —Shows domains that have AutoSSL problems. For example, it shows domains that are not assigned to IPv4 addresses on the Internet.

AutoSSL Status

• All (All) —Shows all domains regardless of their AutoSSL status. This is the default search filter.
• Included (Included) —Displays domains included in AutoSSL when run.
• Excluded (Excluded) — Displays domains that are not visible to AutoSSL when run.

Select AutoSSL

To control whether individual domains are included in AutoSSL, choose one of the following settings:

• AutoSSL Include (Include during AutoSSL) —Check the box for each domain to include when AutoSSL runs. Next, click AutoSSL (Include while AutoSSL ).
• AutoSSL Exclude (Exclude during AutoSSL) —Check the box for each domain to exclude when AutoSSL runs. Then AutoSSL ( during AutoSSL) .
• AutoSSL Run (Run AutoSSL) — Causes the system to run AutoSSL immediately. The system displays the AutoSSL is in progress ( AutoSSL is in progress … ) message for the duration of the run. The SSL/TLS Status (Status) interface is reloaded when AutoSSL completes execution.

Note :

If you load this interface and AutoSSL is currently in progress, AutoSSL is in progress … You will see the message ( AutoSSL is in progress …) .

 

domain table

The Domains (Domains) table lists domains and certificates. You can use the table to view or upgrade your domain's certificates. This table displays the following information:

 

domain

This column displays a complete or filtered list of all domains in your cPanel account. This column also displays icons representing the following certificates:

• Unsecured ( Unsecured
• Self Signed
• AutoSSL DV Certificate
• DV Certificate
• OV Certificate
• EV Certificate

 

certificate status

This column displays certificate information for your domain. If errors exist for your domain in the /var/cpanel/logs/autossl/ directory, the system displays them in this column. This column displays the last time the system ran AutoSSL for the domain. You can also choose from the following settings:

• Certificate View (View Certificate) — View the certificate for your domain. This system supports SSL/TLS interface ( cPanel > > Home > > Security > > SSL/TLS ) Install and manage SSL ( This will take you to Install and Manage SSL for your site (HTTPS) section.

Note :

This setting is only available for domains that have certificates.

• Certificate Upgrade or Purchase (Upgrade Certificate or Purchase Certificate ) — Upgrade or purchase a certificate for your domain. The system uses SSL/TLS Wizard interface ( cPanel > > Home > > Security > > SSL/TLS Wizard ). This interface displays the available certificate types and domains.

Note :

This setting is only available for applicable domains.

• AutoSSL while containing or AutoSSL in Exclude (Include during AutoSSL or Exclude from AutoSSL) — Include AutoSSL or exclude it from this domain.

Note :

If you have installed a non-AutoSSL certificate and have not configured AutoSSL to use that certificate, you will not see these settings.

 

 

Original: SSL/TLS Status