Last modified: 2025 October 22
Looking for this interface?
Your hosting provider can enable or disable this interface in WHM's Feature Manager interface (WHM >> Home >> Packages >> Feature Manager).
Overview
This interface lets you view domains’ Secure Sockets Layer (SSL) certificates. You can also view a domain’s certificate details.
- cPanel & WHM supports Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3:
- cPanel & WHM only supports TLSv1.2 or later. The system enables TLSv1.2 by default.
- Not all clients will support TLSv1.3, which requires OpenSSL 1.1.1 or higher.
- If you are using AutoSSL or SSL certificates purchased via your cPanel account to secure a linked mail node, your cPanel & WHM nodes must be able to manage the authoritative DNS server.
For more information about how SSL/TLS verifies server identities to protect your websites, read our Guide to SSL.
CAA records in zone files
Certificate Authority Authentication (CAA) records in a domain’s zone file restrict which Certificate Authorities (CA) may issue certificates for that domain.
- If no CAA records exist for a domain, all CAs can issue certificates for that domain.
- If conflicting CAA records exist, remove the existing CAA records or add one for the desired CA.
You can manage your CAA records in the Zone Editor interface (cPanel » Home » Domains » Zone Editor). For more information about a CA’s requirements, read their documentation.
Purchase certificates banner
The banner at the top of the interface lets you perform the following actions:
| Action | Description |
|---|---|
| Purchase Certificates | When you select this setting, the system directs you to the SSL/TLS Wizard interface (cPanel » Home » Security » SSL/TLS Wizard). |
| Show Unsecured Domains | The system filters the list of domains in the Domains table to only display unsecured domains.
Warning:
We strongly recommend that you secure all of the domains that your visitors may view.
|
Search and filter
The Search text box lets you filter the Domains table by a domain name.
- Enter all or part of a domain name to update the table.
- Click the filter icon (
) to display all available filter settings.
You can select from the following filters:
Domain Types
| Domain Type | Description | Examples |
|---|---|---|
| All | Display all domains, regardless of type. This is the default search filter. | |
| Main | Display main domains. |
|
| Subdomain | Display subdomains. |
|
| Addon Domains | Display addon domains. |
|
| Parked Domains | Display parked domains. |
|
| www and mail domain | Display www and mail subdomains. |
|
| Service subdomains | Display service subdomains. |
|
| DDNS Domains | Display dynamic DNS domains. |
|
SSL Types
| SSL Types | Description |
|---|---|
| All | Display all domains, regardless of the certificate type. This is the default search filter. |
| Unsecured | Display domains do not have a certificate. |
| Self-Signed | Display domains that you have secured with a self-signed certificate. No CAs secure self-signed certificates. |
| AutoSSL DV Certificate | Display domains that you have secured with an AutoSSL-issued Domain-Validated (DV) certificate. |
| DV Certificate | Display domains that you have secured with a DV certificate. |
| OV Certificate | Display domains that you have secured with an Organizational Validation (OV) certificate. |
| EV Certificate | Display domains that you have secured with an Extended Validation (EV) certificate. |
SSL Statuses
| SSL Statuses | Description |
|---|---|
| All | Display all domains, regardless of certificate status. This is the default search filter. |
| Active | Display domains that you have secured by active certificates. |
| Expired | Display domains with an expired certificate. |
| Expiring Soon | Display domains whose certificates will expire soon. |
| Unsecured | Display domains that do not have a certificate. |
| Has AutoSSL Problems | Display domains with AutoSSL problems. For example, display a domain that does not resolve to an IPv4 address on the internet. |
AutoSSL Statuses
| AutoSSL Statuses | Description |
|---|---|
| All | Display all domains, regardless of AutoSSL status. This is the default search filter. |
| Included | Display domains that AutoSSL includes when it runs. |
| Excluded | Display domains that AutoSSL does not include when it runs. |
The Domains table
The Domains table lists your domains and their certificates. You can use the table to view or upgrade a domain’s certificate. This table displays the following information:
Domain
This column displays a complete or filtered list of all domains on the cPanel account. The column will also display an icon that represents the following certificates:
| Icon | Certificate type |
|---|---|
 |
Unsecured |
 |
Self-Signed |
 _ |
AutoSSL DV certificate |
 |
DV certificate |
 |
OV certificate |
 |
EV certificate |
Certificate Status
This column displays a domain’s certificate information. If an error exists for the domain in the /var/cpanel/logs/autossl/ directory, the system displays that error in this column. The column also displays the last time the system ran AutoSSL for the domain. You can also select from the following settings:
| Setting | Description |
|---|---|
| View Certificate | View the domain’s certificate. The system will direct you to the Install and Manage SSL for your site (HTTPS) section of the SSL/TLS interface (cPanel » Home » Security » SSL/TLS).
Note:
This setting is only available for domains with a certificate.
|
| Upgrade Certificate or Purchase Certificate | Upgrade or purchase a certificate for the domain. The system will direct you to the SSL/TLS Wizard interface (cPanel » Home » Security » SSL/TLS Wizard). This interface displays the domain and the available types of certificates.
Note:
These settings are only available for applicable domains.
|