SSL TLS Status

Valid for versions 86 through the latest version

Version:

82

86


Last modified: March 19, 2020

Overview

This interface lets you view, upgrade, or renew your domains’ Secure Sockets Layer (SSL) certificates. You can also view a domain’s certificate details.

Warning:

We support Transport Layer Security (TLS) protocol version 1.2.

  • By default, cPanel & WHM uses TLSv1.2. If your server does not use TLSv1.2, we strongly recommend that you enable it on your server.

CAA records in zone files

Certificate Authority Authentication (CAA) records in a domain’s zone file restrict which Certificate Authorities (CA) may issue certificates for that domain.

  • If no CAA records exist for a domain, all CAs can issue certificates for that domain.

  • If conflicting CAA records exist, remove the existing CAA records or add one for the desired CA.

You can manage your CAA records in the Zone Editor interface (cPanel >> Home >> Domains >> Zone Editor). For more information about a CA’s requirements, read their documentation.

Purchase certificates banner

The banner at the top of the interface lets you to perform the following actions:

  • Purchase Certificates — When you select this option, the system directs you to the SSL/TLS Wizard interface (cPanel >> Home >> Security >> SSL/TLS Wizard).

  • Show Unsecured Domains — The system filters the list of domains in the Domains table to only display unsecured domains.

    Warning:

    We strongly recommend that you secure all of the domains that your visitors may view.

Search and filter

The Search text box lets you filter the Domains table by a domain name. Enter all or part of a domain name to update the table. Click the filter icon (Gear icon) to display all available filter options. You can select from the following filters:

Domain Types

  • All — Display all domains, regardless of type. This is the default search filter.

  • Main — Display main domains. For example:

    • example.com
    • www.example.com
  • Subdomain — Display subdomains. For example:

    • store.example.com
    • www.store.example.com
  • Addon Domains — Display addon domains. For example:

    • addon.com
    • www.addon.com
  • Parked Domains — Display parked domains. For example:

    • parked.com
    • www.parked.com
  • www and mail domain — Display www and mail subdomains. For example:

    • www.example.com
    • mail.example.com
  • Service subdomains — Display service subdomains. For example:

    • cpanel.example.com
    • whm.example.com
    • webmail.example.com
    • webdisk.example.com

SSL Types

  • All — Display all domains, regardless of the certificate type. This is the default search filter.

  • Unsecured — Display domains do not have a certificate.

  • Self-Signed — Display domains secured with a self-signed certificate. Self-signed certificates are not secured by any CA.

  • AutoSSL DV Certificate — Display domains secured with an AutoSSL-issued Domain-Validated (DV) certificate.

  • DV Certificate — Display domains secured with a DV certificate.

  • OV Certificate — Display domains secured with an Organizational Validation (OV) certificate.

  • EV Certificate — Display domains secured with an Extended Validation (EV) certificate.

SSL Statuses

  • All — Display all domains, regardless of certificate status. This is the default search filter.

  • Active — Display domains secured by active certificates.

  • Expired — Display domains with an expired certificate.

  • Expiring Soon — Display domains whose certificates will expire soon.

  • Unsecured — Display domains that do not have a certificate.

  • Has AutoSSL Problems — Display domains with AutoSSL problems. For example, a domain that does not resolve to an IPv4 address on the internet.

AutoSSL Statuses

  • All — Display all domains, regardless of AutoSSL status. This is the default search filter.

  • Included — Display domains that AutoSSL includes when it runs.

  • Excluded — Display domains that AutoSSL does not include when it runs.

AutoSSL selection

To control whether AutoSSL includes an individual domain, select one of the following options:

  • Include during AutoSSL — Select the checkbox of each domain to include when AutoSSL runs, then click Include during AutoSSL.

  • Exclude during AutoSSL — Select the checkbox of each domain to exclude when AutoSSL runs, then click Exclude during AutoSSL.

  • Run AutoSSL — Force the system to perform an immediate AutoSSL run. The system will display the AutoSSL is in progress … message for the duration of the run. The SSL/TLS Status interface will reload when AutoSSL completes its run.

    Note:

    You may see the AutoSSL is in progress … message if you load this interface an an AutoSSL run is currently in progress.

The Domains table

The Domains table lists your domains and their certificates. You can use the table to view or upgrade a domain’s certificate. This table displays the following information:

Domain

This column displays a complete or filtered list of all domains on the cPanel account. The column will also display an icon that represents following certificates:

  • Usecured certificate iconUnsecured

  • Self-signed certificate iconSelf-Signed

  • AutoSSL DV certificate iconAutoSSL DV certficiate

  • DV certificate iconDV certificate

  • OV certificate iconOV certificate

  • EV certificate iconEV certificate

Certificate Status

This column displays a domain’s certificate information. If an error exists for the domain in the /var/cpanel/logs/autossl/ directory, the system displays that error in this column. The column also displays the last time the system ran AutoSSL for the domain. You can also select from the following options:

  • View Certificate — View the domain’s certificate. The system will direct you to the Install and Manage SSL for your site (HTTPS) section of the SSL/TLS interface (cPanel >> Home >> Security >> SSL/TLS).

    Note:

    This option is only available for domains with a certificate.

  • Upgrade Certificate or Purchase Certificate — Upgrade or purchase a certificate for the domain. The system will direct you to the SSL/TLS Wizard interface (cPanel >> Home >> Security >> SSL/TLS Wizard). The SSL/TLS Wizard interface displays the domain and the available types of certificates.

    Note:

    These options are only available for applicable domains.

  • Include during AutoSSL or Exclude from AutoSSL — Include or exclude AutoSSL from this domain.

Additional Documentation