Installing Let’s Encrypt SSL via cPanel enables your website to operate over an HTTPS connection. The certificate is valid for 90 days, and automatic renewal depends on whether the hosting provider has integrated certificate management into cPanel.

A short validity period does not in itself require any regular manual action: provided the settings are correct, the certificate is renewed automatically in the background. However, if the domain does not point to the correct server, or if the validation fails, both issuance and renewal may be blocked.

This guide explains how to install a certificate in cPanel, check its validity and renewal status, and redirect HTTP traffic to HTTPS. In the section on common errors, we also outline which DNS and server settings you should check to ensure your website is accessible via a secure connection.

Checking certificates and renewal logs

After installation, please check the certificate status, domain accessibility and the HTTPS connection separately. The Let’s Encrypt certificate is valid for 90 days, so it is also worth keeping an eye on the renewal status in cPanel.

What is the difference between Let’s Encrypt and a paid SSL certificate in cPanel? According to the Internet Security Research Group (ISRG), Let’s Encrypt certificates can be obtained free of charge. The terms and conditions of paid certificates depend on the issuer and the specific certificate in question, so the price alone does not reflect the technical differences.

1. Checking the installation using the green padlock

   Open the website via an HTTPS connection, for example the homepage and an internal page. Check for the padlock icon in the browser’s address bar, then view the certificate details. Ensure that the certificate is for the correct domain and that the browser indicates it is valid. The absence of the padlock alone does not prove that the installation has failed.

   If you’re looking for information on cPanel’s SSL/TLS settings, the section on managing SSL/TLS certificates will also help you understand the key points to check.

2. Checking that the certificate is working

   Open the certificate details and compare the domain name with the website address. For example, the certificate for pelda.hu must also include the www.pelda.hu version if the website is accessible via that address as well. Check the issue and expiry dates, and ensure that the browser does not display a trust error. The expiry date is particularly important due to the 90-day validity period.

   On HTTPS pages, check images, style sheets and scripts as well. If these are loaded from an HTTP address, the browser may flag the content as mixed, even if the certificate is valid.

3. In cPanel, open the ‘Status’ tab under the ‘SSL/TLS Certificates’ menu, then locate the row for your domain. Check that the certificate is active and which domains it covers. If there are several domains or subdomains listed in the account, check each row separately. The padlock appearing next to one address does not automatically confirm that the other domains are working correctly.
4. Check any installation or renewal errors reported by cPanel and make a note of the affected domain. Certificate renewal is handled by an automated process if the hosting platform supports this feature. Given the 90-day validity period, you should pay attention to the error message as the expiry date approaches. If the certificate status is not updated, check again that the affected domain can be accessed via HTTPS.

Look for the entries relating to the domain in question in the renewal log, and compare the status shown there with the information displayed on the Status tab under the SSL/TLS Certificates menu in cPanel. If a log is available via your hosting control panel, make a note of whether a renewal attempt was made and what the outcome was. If an entry is missing or has failed, check the domain’s HTTPS access again, then verify that the certificate is still valid for the correct domain names. Let’s Encrypt certificates are free, and anyone with a domain name can apply for one, according to the Internet Security Research Group (ISRG).

The log and browser feedback can together help you distinguish between a certificate nearing expiry and an installation or access issue. Don’t just check the homepage: also check the domain variants and pages that you actually use. If there is a discrepancy, make a note of which domain was affected, what cPanel displayed, and what the browser indicated. This makes it easier to check later and helps you track whether the error has been resolved. It is also worth reviewing the certificate status at a later date, particularly if the outcome of the renewal is unclear.

Troubleshooting failed registration and renewal requests

Check the domain’s DNS settings, the firewall and the cPanel status indicators for the cause of the request error. Work through the checks below, then try the process again after making any changes.

1. Check the DNS settings for the domain and the ‘www’ subdomain. Ensure that the DNS settings for the domain and the ‘www’ subdomain are correctly pointing to the hosting account, as incorrect settings may complicate the verification process. Check the A record on the DNS server and compare it with the hosting account’s IP address. If the two names resolve to different addresses, correct the incorrect record first. Also check any parked domains. If the certificate request includes these but they point to a different server, the verification may fail. Set the same correct destination address, or temporarily remove the parked domain from the request. The installation of Let’s Encrypt SSL via cPanel can only proceed successfully if the domain in question points to the correct server.
2. Check whether your firewall allows HTTP-based domain validation. To do this, port 80 must be open on the server. If the firewall blocks this traffic, the authentication system will be unable to access the content required for verification. When modifying the rule, check the server’s firewall and any network filtering as well. Then restart the certificate request in cPanel. If the error persists, make a note of the domain name concerned and the message displayed by cPanel. The exact error message will help distinguish a DNS issue from an accessibility or firewall rule error. You can try installing the Let’s Encrypt SSL certificate in cPanel again once the cause of the error has been rectified.
3. Open your cPanel certificate manager and check the renewal status. The Let’s Encrypt certificate is valid for 90 days, so do not ignore a failed renewal notification. Identify which domain the error relates to, then check its DNS records and HTTP accessibility. The expiry date and status message together indicate which step requires correction. Do not request a new certificate until you have rectified the DNS or firewall error. First, resolve the cause of the error, then restart the cPanel process. This will ensure that the next check examines the corrected settings.
4. Check whether your hosting platform offers an AutoSSL feature. If your provider has integrated it into cPanel, the AutoSSL system can handle the issuance and renewal of certificates in the background. Check the cPanel status indicators to see whether the domain in question has been included in the automated process. Without this integration, automatic renewal does not take place at the cPanel account level. Automatic checks also do not resolve incorrect DNS records or a blocked port 80. Correct these issues first, then check the certificate status again. For cPanel hosting to function properly, it is important that both DNS and certificate management are configured correctly.

Redirecting HTTP traffic to HTTPS

Once the certificate has been installed, redirect HTTP addresses to HTTPS. The cPanel guides recommend a permanent 301 redirect. This ensures that the browser requests the encrypted version when a visitor opens the old address.

1. Open the cPanel File Manager and locate your website’s root directory. This is often the public_html folder, but the domain may be located in a different directory. Enable the display of hidden files, then locate the .htaccess file. Before making any changes, create a backup of the original file so that you can revert to the previous settings in the event of an error. If you have multiple domains running on the same cPanel account, ensure you select the correct root directory. Do not modify another website’s .htaccess file at random, as a rule applied to the wrong location could affect traffic to another domain.
2. Add the 301 redirect to the .htaccess file in the root directory. On an Apache-based server, for example, these rules will forward the request to the HTTPS version:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP\_HOST}%{REQUEST\_URI} \[R=301,L\]

REQUEST_URI preserves the path and the requested page. For example, the URL http://pelda.hu/kapcsolat redirects to https://pelda.hu/kapcsolat. Place this rule before the content management system’s automatic rules so that the redirect runs first.

1. After saving, try the HTTP and HTTPS versions in a browser. Test the main domain, the www address and an internal page. For example, a request for http://www.pelda.hu/elerhetoseg should take you to the corresponding HTTPS page, not just the homepage. A 301 response indicates a permanent redirect, so carry out the test after saving the change. If the request keeps looping back and forth, check the other rules in the .htaccess file. Parallel redirects from cPanel, the content management system or a plugin can cause a loop. Ensure that the rule redirecting from HTTP to HTTPS is maintained in only one place.
2. You should also change the website’s default address to HTTPS in your content management system. In the case of WordPress, for example, both the web address and the WordPress address should begin with HTTPS. If you only change the redirect whilst the site continues to load images or style sheets via HTTP, the browser may flag this as mixed content. Locate these resources and update their links. Finally, clear your cache and repeat the test in a new browser window. The browser may still be storing the old redirect response. Check both the homepage and internal pages to ensure that all traffic is coming via an encrypted connection.

An HTTPS address using port 2083 is used to access cPanel. Open the control panel at this address, then check the changes made to the website’s root directory in the file manager. Establishing the connection to log in and testing the website’s redirection are two separate steps: first, use the correct cPanel address, then check that the visitor-facing page is working correctly.

SSL/TLS Certificates and Using the Wizard

You can check your certificates and access the installation options via the cPanel SSL/TLS interface. The names of the menu items may vary depending on the version of the interface and your hosting settings.

1. Log in to your cPanel account, then open the SSL/TLS section. Look for the certificate management section or the available installation wizard. The interface will show you which actions you can manage from your account. If a separate Let’s Encrypt extension appears, use that to start the certificate request. The installation of Let’s Encrypt SSL in cPanel begins on this page, provided the extension is available. A tool called the ‘Wizard’ will guide you step by step through the SSL setup. Before proceeding, read the explanations for each field. Select the domain of the website you wish to secure accurately.
2. Select the domain you wish to cover with the certificate. If your website is accessible at both pelda.hu and www.pelda.hu, check that both names are listed. The certificate is valid only for the names specified in it. It is therefore important to check the list of domains displayed in cPanel before installation. Do not select any subdomains that do not belong to this website. A certificate installed on the wrong domain will not protect the other address opened by the visitor. For example, shop.pelda.hu is considered a separate name from the main domain.
3. Start the Let’s Encrypt certificate issuance process using the option available in the control panel. cPanel may display the status of the request or any errors that occurred during the verification process. Please wait for confirmation of successful installation before making any further changes to the settings. If the wizard requests a CSR or manual certificate details, check that you really wish to use this method. Manual SSL/TLS installation may be a separate process. In this case, cPanel manages the certificate, private key and, if necessary, the intermediate certificate. Do not enter data into the fields at random. The private key is confidential information, so do not disclose it or send it via public channels.
4. After receiving a successful response, open the website using the HTTPS address. Check that the browser displays the certificate for the correct domain. If the website does not load correctly, check the cPanel status and the selected domain names. The installation of Let’s Encrypt SSL in cPanel is complete when the certificate corresponds to the correct domain and the website is accessible via HTTPS.
5. Make a note of which cPanel menu item you used and which domains are associated with the certificate. This will help you find your website’s settings more quickly the next time you check. The menu layout may change after an update to the interface or cPanel version, so make sure to note down both the name and function of the tool.

Installation errors and compatibility issues

To use Let’s Encrypt, the domain must point to the IP address of your cPanel account. The hosting platform must support the issuance and renewal of certificates, for example through AutoSSL integration.

1. Check the destination of parked domains in cPanel. A parked domain must resolve to the same server as the primary domain. For example, if pelda.net points to a different IP address, the verification process may fail. Redirect it to the correct server, or temporarily remove it from the account, then restart the certificate request. Also check the destination address of the domain and the www subdomain. Both must point to the IP address of your cPanel account. Discrepancies in DNS records can cause errors even if the main domain is already working. Once you have corrected them, wait for the changes to take effect, then try the request again.
2. Check whether your browser is displaying a valid certificate for the domain. The padlock icon visible in your browser may indicate that a certificate has already been installed for the domain. In cPanel, check the name and status of the existing certificate. If the website is working but no padlock is visible, check that you are actually viewing the correct domain. Do not delete a valid certificate simply because you wish to request a new one. First, identify the existing certificate via the cPanel SSL/TLS interface. The padlock visible in the browser, together with the status indicator in cPanel, can help you distinguish between an installation error and a situation where the certificate belongs to a different domain.
3. Before applying for a wildcard certificate, check that the settings match the desired domain names. In the ‘Domains’ section of cPanel, enter the pattern *.example.hu, replacing ‘example’ with your own domain. Then submit the application via the relevant certificate authority. The absence of a wildcard domain may cause compatibility issues during installation. If the website is also accessible at blog.pelda.hu or shop.pelda.hu, check that the certificate covers these names. Before setting up a wildcard, ensure that you have created the appropriate subdomain in cPanel.
4. Check which certificate management features are supported by cPanel and your hosting platform. Automatic issuance and renewal usually require provider integration. The Let’s Encrypt extension for cPanel issues certificates for the domains in your account, but not for the system’s hostname. Let’s Encrypt cannot be used for the automatic renewal of a cPanel-signed certificate associated with the server hostname. Choose separate certificates for the website and for the server hostname. For example, the website certificate for pelda.hu is not the same as the certificate used for cPanel services. It is also important, when configuring your cPanel hosting, to use the correct certificate management method for the relevant domain.
5. Check the .htaccess file if your website does not load as expected after installation. The redirect rules in this file can influence which address visitors are directed to, but they will not fix incorrect DNS settings or failed certificate validation. Temporarily identify the relevant rule and make only the necessary changes. After modifying the security settings, test the main domain and subdomains separately.

aWh: Web hosting

aWh’s web hosting could be the natural next step if you’re looking for hosting for your website and domain-related services. If you get stuck with the cPanel SSL settings, it’s important to configure your hosting and domain correctly in order to issue and renew your certificate.

When making your choice, consider where your website’s files are hosted, which IP address the domain points to, and what cPanel features are available. If you need a dedicated server environment, aWh also offers KVM VPS. If you don’t yet have a domain, you can manage your website’s address and hosting together with your domain registration.

Find out more about aWh’s web hosting service, or visit awh.hu.

Make certificate management part of your website operations

After installing Let’s Encrypt SSL via cPanel, make certificate management part of your website’s regular maintenance tasks. Make a note of which domains belong to the site, where you have set up the redirects, and which cPanel interface you can use to monitor the certificate’s status. This way, you’ll be able to find the relevant settings more quickly should you need to make any changes later on.

Before you migrate your website, change the DNS settings or add a new subdomain, consider how the change will affect HTTPS access. Making notes in advance will help ensure that no old addresses, redirects or domain settings are overlooked. Maintaining a secure connection also depends on ensuring that the certificate, application and hosting settings are all in sync.

If you need practical help setting up your hosting or domain environment, please contact the aWh team.

Ask the aWh team for help and make the running of your website more transparent.

Our knowledge base article describes the steps to follow on aWh’s web hosting service: Enabling a free Let’s Encrypt certificate on your web hosting account.

Frequently asked questions about SSL in cPanel

How does automatic SSL work?

Automatic SSL manages the issuance and renewal of certificates for domains assigned to your cPanel account in the background. The process checks the domain’s availability and, following a successful check, installs the certificate. Renewal can also take place automatically if the hosting platform has integrated AutoSSL or the Let’s Encrypt extension. It is worth keeping an eye on the domain’s status and any error messages in cPanel.

Which domains can Let’s Encrypt SSL be installed on?

The certificate is installed on the domain names selected at the time of application and assigned to your cPanel account. These could include, for example, pelda.hu, www.pelda.hu or a subdomain such as shop.pelda.hu. Please check the names covered in the certificate details, as the website may be accessible via multiple addresses. Do not assume that all names listed in the cPanel domain list are automatically covered.

How long does it take for the free SSL to be activated?

The activation time depends on the processing of the request and the verification of the domain. cPanel must successfully access the domain required for verification and then install the issued certificate. If the DNS settings have recently been changed, the verification process may still see the old destination address. Please follow the status message in cPanel and only test the HTTPS version once the installation has been successfully completed.

What should you do if it doesn’t work?

Read the cPanel error message and make a note of which domain is affected. Then check whether the domain and the www version point to the hosting IP address, and whether port 80 – required for HTTP-based checks – is accessible. Also check whether a parked domain is redirecting to another server. Once you have rectified the cause of the error, restart the certificate request.

How to install a Let’s Encrypt SSL certificate in cPanel, step by step?

To install Let’s Encrypt SSL in cPanel, log in to your account and open the ‘Status’ tab under the ‘SSL/TLS Certificates’ menu. Select the domain you wish to secure and its associated names, then initiate the certificate request. Wait for confirmation of the installation and check your website’s HTTPS address. If the interface uses AutoSSL, follow the status indicators for the domain.

Where can I find the Let’s Encrypt SSL or AutoSSL feature in cPanel?

On aWh’s cPanel hosting, open the ‘SSL/TLS Certificates’ menu item in the ‘Security’ group, then select the ‘Status’ tab: here you can view the certificates and expiry dates for all your domains, and manually run AutoSSL (‘Run AutoSSL’). AutoSSL does not have a separate menu item.

How do you set up DNS and domain verification for certificate issuance?

Configure your domain’s DNS records to point to the IP address of your cPanel account. Check the same for the www version as well, if your website uses it. For HTTP-based verification, port 80 on the server must be accessible. A request initiated from cPanel can only verify access to the domain if the requested name is routed to the correct server and the verification request reaches the website.

How can I request an SSL certificate for www and subdomain names in cPanel?

When requesting a certificate, please select the main domain and the www version separately if you use both. If your cPanel domain list offers them, include subdomain names, such as blog.pelda.hu, in your request. Before applying for a wildcard certificate, create the appropriate subdomain in the format *.pelda.hu in the cPanel Domains section. After installation, check the certificate details to see which names it covers.

• ssl certificates
• cpanel
• guides
• website security