Overview
This page shows the Secure Sockets Layer (SSL) certificates of your domains and lets you inspect the details of any single certificate.
When your hosting provider has set autossl.exclude_new_domains in the /var/cpanel/panel.ini file, this page may show up as a tab inside the SSL/TLS Certificates interface (cPanel » Home » Security » SSL/TLS Certificates) instead.
- cPanel & WHM works with Transport Layer Security (TLS) protocol version 1.2 and Transport Layer Security (TLS) protocol version 1.3:
- Only TLSv1.2 and newer are supported, and TLSv1.2 is turned on by default.
- TLSv1.3 needs OpenSSL 1.1.1 or higher, so some clients cannot use it.
- When AutoSSL or SSL certificates purchased via your cPanel account protect a linked mail node, your cPanel & WHM nodes must be able to manage the authoritative DNS server.
To learn how SSL/TLS confirms server identity and protects your sites, read the Guide to SSL.
CAA records in zone files
Certificate Authority Authentication (CAA) records in a domain’s zone file define which Certificate Authorities (CA) are permitted to issue certificates for the domain.
- A domain with no CAA records can receive certificates from any CA.
- If CAA records conflict with the CA you want, delete them or add a record for that CA.
CAA records are managed in the Zone Editor interface (cPanel » Home » Domains » Zone Editor). Each CA publishes its own requirements in its documentation.
Purchase certificates banner
The banner at the top of the page offers these actions:
| Action | Description |
|---|---|
| Purchase Certificates | Takes you to the SSL/TLS Wizard interface (cPanel » Home » Security » SSL/TLS Wizard). |
| Show Unsecured Domains | Narrows the Domains table so that it lists only unsecured domains.
Warning:
We strongly advise securing every domain that visitors can open.
|
Search and filter
Use the Search text box to narrow the Domains table by domain name.
- Type the whole domain name or a part of it and the table updates.
- Click the filter icon (
) to reveal all the filter options.
These filters are available:
Domain Types
| Domain Type | Description | Examples |
|---|---|---|
| All | Shows every domain regardless of type. This is the default filter. | |
| Main | Shows main domains. |
|
| Subdomain | Shows subdomains. |
|
| Addon Domains | Shows addon domains. |
|
| Parked Domains | Shows parked domains. |
|
| www and mail domain | Shows the www and mail subdomains. |
|
| Service subdomains | Shows service subdomains. |
|
| DDNS Domains | Shows dynamic DNS domains. |
|
SSL Types
| SSL Types | Description |
|---|---|
| All | Shows every domain regardless of certificate type. This is the default filter. |
| Unsecured | Shows domains without a certificate. |
| Self-Signed | Shows domains protected by a self-signed certificate. No CA vouches for self-signed certificates. |
| AutoSSL DV Certificate | Shows domains protected by a Domain-Validated (DV) certificate issued by AutoSSL. |
| DV Certificate | Shows domains protected by a DV certificate. |
| OV Certificate | Shows domains protected by an Organizational Validation (OV) certificate. |
| EV Certificate | Shows domains protected by an Extended Validation (EV) certificate. |
SSL Statuses
| SSL Statuses | Description |
|---|---|
| All | Shows every domain regardless of certificate status. This is the default filter. |
| Active | Shows domains protected by a certificate that is active. |
| Expired | Shows domains whose certificate has expired. |
| Expiring Soon | Shows domains whose certificate is about to expire. |
| Unsecured | Shows domains without a certificate. |
| Has AutoSSL Problems | Shows domains where AutoSSL ran into trouble, for example a domain that does not resolve to an IPv4 address on the internet. |
AutoSSL Statuses
| AutoSSL Statuses | Description |
|---|---|
| All | Shows every domain regardless of AutoSSL status. This is the default filter. |
| Included | Shows domains that AutoSSL covers when it runs. |
| Excluded | Shows domains that AutoSSL skips when it runs. |
The Domains table
The Domains table lists each domain with its certificate, and you can use it to inspect or upgrade a certificate. It contains the following columns:
Domain
This column lists all domains of the cPanel account, or only those that match your filter. An icon next to each name tells you the certificate type:
| Icon | Certificate type |
|---|---|
 |
Unsecured |
 |
Self-Signed |
 |
AutoSSL DV certificate |
 |
DV certificate |
 |
OV certificate |
 |
EV certificate |
Certificate Status
This column shows certificate details for the domain. If the /var/cpanel/logs/autossl/ directory holds an error for the domain, it is displayed here, along with the last time AutoSSL ran for the domain. The following settings are also available:
| Setting | Description |
|---|---|
| View Certificate | Opens the certificate of the domain in the Install and Manage SSL for your site (HTTPS) section of the SSL/TLS interface (cPanel » Home » Security » SSL/TLS).
Note:
Only domains that have a certificate offer this setting.
|
| Upgrade Certificate or Purchase Certificate | Lets you upgrade or buy a certificate for the domain. You are taken to the SSL/TLS Wizard interface (cPanel » Home » Security » SSL/TLS Wizard), which shows the domain and the certificate types you can choose.
Note:
These settings appear only for domains where they apply.
|
