Using the SSL TLS Status Interface in cPanel

cPanel Tutorials and How To Guides

Tips and tricks on how to better optimize your cPanel

Secure Sockets Layer Certificates

Updated: January 3, 2025
By: RSH Web Editorial Staff

Contact Us


Menu

cPanel - Security - SSL-TLS Status

This cPanel feature lets you view, upgrade, or renew your domain names Secure Sockets Layer SSL certificates.

For more information on "Managing AutoSSL" see cPanel's AutoSSL
For more information about how SSL/TLS verifies server identities to protect your websites, see cPanel's Guide to SSL

IP Blocker

CAA Records in Zone Files

Certificate Authority Authentication Records (CAA)in a domain’s zone file restrict which Certificate Authorities (CA) may issue certificates for that domain.

If no CAA records exist for a domain, all CAs can issue certificates for that domain.

If conflicting CAA records exist, remove the existing CAA records or add one for the desired CA.

You can manage your CAA records in the Zone Editor interface. For more information see Certificate Authority requirements

Purchase/Show Certificates Banner

The banner at the top of the interface lets you to perform the following actions:

Purchase Certificates - When you select this setting, the system directs you to the SSL/TLS Wizard interface.

Show Unsecured Domains - The system filters the list of domains in the Domains table to only display unsecured domains.

Warning: We strongly recommend that you secure (HTTPS) all of the domains with SSL.

Search and Filter Domains

The Search text box lets you filter the Domains table by a domain name.

Enter all or part of a domain name to update the table.

Click the filter icon (Gear icon) to display all available filter settings.

Domain Types

All - Display all domains, regardless of type. This is the default search filter

Main - Display main domains

Subdomain - Display Subdomains

Addon Domains - Display Addon Domains

Parked Domains - Display Parked Domains

www and mail domain - Display www and mail subdomains

Service subdomains - Display service subdomains

DDNS Domains - Display Dynamic DNS domains

SSL Types

All - Display all domains, regardless of the certificate type. This is the default search filter

Unsecured - Display domains do not have a certificate

Self-Signed - Display domains that you have secured with a self-signed certificate. No CAs secure self-signed certificates

AutoSSL DV Certificate - Display domains that you have secured with an AutoSSL-issued Domain-Validated (DV) certificate

DV Certificate - Display domains that you have secured with a DV certificate

OV Certificate - Display domains that you have secured with an Organizational Validation (OV) certificate

EV Certificate - Display domains that you have secured with an Extended Validation (EV) certificate

SSL Statuses

All - Display all domains, regardless of certificate status. This is the default search filter.

Active - Display domains that you have secured by active certificates.

Expired - Display domains with an expired certificate.

Expiring Soon - Display domains whose certificates will expire soon.

Unsecured - Display domains that do not have a certificate.

Has AutoSSL Problems - Display domains with AutoSSL problems. For example, display a domain that does not resolve to an IPv4 address on the internet.

AutoSSL Statuses

All - Display all domains, regardless of AutoSSL status. This is the default search filter.

Included - Display domains that AutoSSL includes when it runs.

Excluded - Display domains that AutoSSL does not include when it runs.

AutoSSL Selection

To control whether AutoSSL includes an individual domain, select one of the following settings:

Include during AutoSSL - Select the checkbox of each domain to include when AutoSSL runs, then click Include during AutoSSL.

Exclude during AutoSSL - Select the checkbox of each domain to exclude when AutoSSL runs, then click Exclude during AutoSSL.

Run AutoSSL - Force the system to perform an immediate AutoSSL run. The system will display the AutoSSL is in progress … message for the duration of the run. The SSL/TLS Status interface will reload when AutoSSL completes its run.

Note: You may see the AutoSSL is in progress … message if you load this interface and an AutoSSL run is currently in progress.

The Domains Table

The Domains table lists your domains and their certificates. You can use the table to view or upgrade a domain’s certificate. This table displays the following information:

Domains

This column displays a complete or filtered list of all domains on the cPanel account. The column will also display an icon that represents the following certificates:

Unsecured certificate icon - Unsecured

Self-signed certificate icon - Self-Signed

AutoSSL DV certificate icon - AutoSSL DV certificate

DV certificate icon - DV certificate

OV certificate icon - OV certificate

EV certificate icon - EV certificate

The column will also display an icon that represents the following certificates:

  • Usecured certificate icon - Unsecured
  • Self-signed certificate icon - Self-Signed
  • AutoSSL DV certificate icon - AutoSSL DV certificate
  • DV certificate icon - DV certificate
  • OV certificate icon - OV certificate
  • EV certificate icon - EV certificate

Certificate Status

This column displays a domain’s certificate information. If an error exists for the domain in the /var/cpanel/logs/autossl/ directory, the system displays that error in this column. The column also displays the last time the system ran AutoSSL for the domain. You can also select from the following settings:

View Certificate - View the domain’s certificate. The system will direct you to the Install and Manage SSL for your site (HTTPS) section of the SSL/TLS interface.

Note: This setting is only available for domains with a certificate.
Upgrade Certificate or Purchase Certificate - Upgrade or purchase a certificate for the domain.
The system will direct you to the SSL/TLS Wizard interface. This interface displays the domain and the available types of certificates.

Include during AutoSSL or Exclude from AutoSSL - Include or exclude AutoSSL from this domain.

Note: If you have installed a non-AutoSSL certificate and haven’t configured AutoSSL to use that certificate, you will not see these settings.

Related cPanel Tutorials and How To Guides
Simple to use hosting dashboard fix website issues yourself

Tweet  Share  Pin  Email

We welcome your comments, questions, corrections and additional information relating to this article. Please be aware that off-topic comments will be deleted.
If you need specific help with your account, feel free to contact us anytime
Thank you

Brought to you by our master copywriters

RSH Web Services hosting plans are carefully crafted to meet the needs and demands of all types of websites, from personal to business websites. we are committed to providing you with the best hosting services available in the industry