Issue a free SSL certificate in cPanel

cPanel's AutoSSL feature provisions Let's Encrypt certificates at no extra cost. Once DNS points to your server, a single button run covers every active domain on the account.

1. Log in to cPanel

1. Authenticate at your cPanel URL (commonly yourdomain.com:2083) with your hosting credentials.

   PosaHosting shortcut

   Reach cPanel instantly from My Account

2. Open SSL/TLS Status

1. In the cPanel home screen, expand the Security section.

2. Click SSL/TLS Status.

3. Trigger AutoSSL

1. Press Run AutoSSL. cPanel contacts Let's Encrypt and installs certificates for every eligible domain on the account.

   Note

   AutoSSL only succeeds when a domain's DNS resolves to this server. Let's Encrypt validates ownership through DNS or HTTP checks, so domains using external nameservers that do not point here will fail.

2. When processing finishes, the page refreshes automatically. Domains that received a certificate show a green checkmark. You can also confirm by loading https://yourdomain.com in a browser.

4. Troubleshooting common issues

Cloudflare proxy

• If the domain sits behind Cloudflare, set the SSL mode under Cloudflare → SSL to Full so the connection between Cloudflare and your origin remains encrypted.

DNS DCV failure

Error: "DNS DCV: No local authority: "example.com"; HTTP DCV: "example.com" does not resolve to any IP addresses on the internet."

• Confirm the domain's A record (or equivalent) points to the correct server IP and has propagated.

Certificate not trusted yet

• Freshly issued certificates can take a few minutes to be recognised everywhere. Clear your browser cache and retry the HTTPS URL if you see a trust warning shortly after issuance.

Expired certificate blocking AutoSSL

• Navigate to SSL/TLS → Manage SSL Sites, uninstall any expired certificates listed there, then run AutoSSL again from SSL/TLS Status.