SSL Knowledge Base articles

35 articles: Let's Encrypt and paid certificates, HTTPS redirection, certificate errors.

An SSL (Secure Sockets Layer) certificate is a security standard that enables the secure exchange of data over the internet. Websites use SSL certificates to encrypt users’ data when it is sent to the site. With an SSL certificate, users can be sure that their data is secure and that the website they are visiting is genuinely what it appears to be. SSL certificates are issued by accredited organisations, and browsers indicate to users when a website is securely encrypted, usually by displaying a green padlock icon.

"Connection is not private" error: what does it mean and how can it be fixed?

Why does the ‘Your connection is not private’ browser error appear, what are the most common causes, and how can it be fixed step by step?

AutoSSL behind Cloudflare: if domain validation fails

If AutoSSL fails to issue a certificate for a domain hosted behind Cloudflare, it is usually because a firewall or bot rule is blocking the verification process. Here’s how to...

Certificate formats: PEM, CRT, PFX – and their conversion

What is the difference between the PEM, CRT, CER, DER, P7B and PFX certificate formats; which system requires which format; and how can they be converted into one another using...

Creating a CSR and a private key

What are CSR and private keys, when should they be created, and how can they be generated via the client portal, cPanel or using the OpenSSL command?

Domain-validated SSL certificates

What is a Domain Validated (DV) SSL certificate, who is it recommended for, and how quickly can it be issued?

How can I check when my SSL certificate is due to expire?

How to check the expiry date of an SSL certificate using a web browser, cPanel or an online SSL checker.

How can I manually renew my Let’s Encrypt certificate via the command line?

How to manually renew a Let's Encrypt SSL certificate using the Certbot command, and how to automate this using a cron job.

How can I redirect my website to HTTPS?

Why is redirecting to HTTPS important for Google’s rankings, and how can you avoid the ‘mixed content’ error?

How can I use my existing SSL certificate?

Transferring an SSL certificate purchased elsewhere when changing hosting providers: what files are required, how to install it in cPanel, and what to do if the private key is lost....

Let's Encrypt or paid SSL: which should I choose?

The differences between Let’s Encrypt and paid SSL certificates in terms of authentication, validity, renewal and warranty, and which is suitable for which website.

Let’s Encrypt free certificates

How to obtain and renew a free Let's Encrypt SSL certificate on a web hosting or cPanel hosting plan, what you need to do, and what to do if it...

Methods of domain validation: email, HTTP file and DNS record

Proving ownership of a domain when applying for an SSL certificate: email verification, an HTTP/HTTPS verification file or a DNS record, and when to choose which option.

Requesting a Let's Encrypt certificate using Certbot (Apache, Nginx)

Requesting and automatically renewing free Let's Encrypt certificates using Certbot on AlmaLinux, Rocky Linux, Debian and Ubuntu servers, running Apache or Nginx.

Setting up and reissuing a paid SSL certificate via the client portal

Configuring a purchased SSL certificate on the aWh client portal via automatic cPanel installation or using your own CSR, and certificate reissue.

SSL behind Cloudflare: Flexible, Full or Full (strict) mode?

Which Cloudflare SSL/TLS mode should you choose for a website hosted on aWh, and how can you fix the ERR_TOO_MANY_REDIRECTS error and errors 525 and 526?

Step-by-step guide to setting up SSL on an Apache server

Installing an SSL certificate on Apache in Debian, Ubuntu, AlmaLinux and Rocky Linux: mod_ssl, virtual hosts, HTTPS redirection and verification.

What are the steps involved in creating an SSL certificate?

The SSL certificate process, from selecting the type through the CSR, domain validation and installation, to verification and regular renewal.

What is a CAA record, and how do I set it up?

What is a CAA DNS record, how does it restrict which certificate authorities can issue an SSL certificate for the domain, and how can it be configured for Let's Encrypt...

What is a multi-domain or SAN certificate?

What is a multi-domain (SAN, Multi-Domain) SSL certificate? When is it preferable to separate certificates or a wildcard certificate, and what should you bear in mind when setting it up?...

What is a Wildcard SSL certificate?

What does a Wildcard SSL certificate protect? Why does it not apply to second-level subdomains? How can it be validated? And when is it a better choice than a SAN...

What is an Extended Validation (EV) certificate?

What does the certificate issuer check for in an EV certificate? Why is the green address bar no longer visible in browsers? How does it differ from an OV certificate?...

What is an intermediate certificate (CA bundle), and why is the certificate chain invalid without it?

What are intermediate certificates and certificate chains? Why does the website only work in certain browsers, and how can the CA bundle be installed in cPanel, Apache and Nginx?

What is an Organisation-Validated (OV) certificate?

What does the certificate authority check when issuing an OV SSL certificate? Where does the company name appear? How long does the issuance process take? And who should choose an...

What is an SSL certificate and why do I need one?

What is an SSL certificate, how does it encrypt traffic between the server and the visitor, and why is it necessary?

What is HSTS, and how can I enable it on my website?

What is the HSTS security header, how does it enforce an HTTPS connection, and how can it be configured on an Apache server?

What is Let’s Encrypt SSL?

What is Let’s Encrypt, who runs it, how does it automatically issue free SSL certificates using the ACME protocol, and how does its validity period expire?

What is mixed content, and how can I fix it?

What is a ‘mixed content’ error, how can it be identified, and what steps can be taken to rectify it?

What is the difference between TLS and SSL?

What is the difference between the SSL and TLS protocols, why do we still refer to them as SSL certificates, and which version of TLS should be enabled today?

What is TLS (Transport Layer Security)?

What is TLS (Transport Layer Security), and how does it encrypt traffic between servers and browsers?

What should you do if your private key has been compromised?

What to do if the private key for an SSL certificate has fallen into the wrong hands: a new key, reissuing the certificate, revoking the old certificate, and how to...

Why are my subdomains visible to the public? (Certificate Transparency)

What is Certificate Transparency, why are all SSL certificates recorded in a public log, what does this reveal about your subdomains, and how can you use it to protect your...

Why are SSL certificates no longer valid for one year?

Why is the validity period of SSL certificates being reduced from 398 days to 200, then 100, and then, from 2029, to 47 days? What is the situation with Let’s...

Why hasn’t my domain received an SSL certificate? (AutoSSL errors)

Common cPanel AutoSSL errors: incorrect DNS, Cloudflare, CAA record, blocked .well-known directory, missing www record. Here’s how to identify and fix the cause.

Why is my email program showing a certificate error?

Why do Outlook, Thunderbird or your phone’s email app show an invalid certificate, and what server name should you enter to make the warning disappear?

Wildcard Let’s Encrypt certificate with DNS validation

How to apply for a free Let’s Encrypt wildcard (*.example.hu) certificate with DNS validation, using acme.sh or Certbot, with automatic renewal.

Can’t find what you’re looking for?

Please write to us and our support team will be happy to help.

Open a ticket