Page tree
Skip to end of metadata
Go to start of metadata

For cPanel & WHM version 66

(Home >> Security >> SSL/TLS Status)


This interface allows you to view, upgrade, or renew your Secure Sockets Layer (SSL) certificates. You can also view useful information about each domain's SSL certificate. For example:

  • The type of certificate that secures the domain
  • When the certificate expires or expired
  • Graphical representation of all certificates for quick reference
  • Applicable options, such as View Certificate or Upgrade Certificate

To conveniently upgrade certificates, click the associated lock icon, or click Purchase Certificate. cPanel's SSL/TLS Wizard interface (Home >> Security >> SSL/TLS Wizard) will appear, which will display the specified domain and available certificates.


CAA records in the domain's zone file restrict which CAs (Certificate Authority) may issue certificates for that domain.

  • If no CAA records exist for a domain, all CAs can issue certificates for that domain.
  • If conflicting CAA records already exist, remove the existing CAA records or add one for the desired CA.

For example, a CAA record for Comodo would resemble the following example, where represents the domain name: 86400 IN CAA 0 issue ""

You can manage CAA records through the Zone Editor interface.

Purchase certificates banner

The banner at the top of the interface allows you to quickly purchase certificates for all unsecured domains, if such domains exist. Alternatively, you can view a list unsecured domains, and select which domains to secure. When you click Purchase Certificates, cPanel's SSL/TLS Wizard interface (Home >> Security >> SSL/TLS Wizard) will appear, which will display the unsecured domains and available certificates. When you click Show Unsecured Domains, the Domain list will display only unsecured domains.

Search bar and filter

The search bar allows you to filter by domain name. Enter all or part of the domain name to update the domain list. For filter options, click the filter icon ().

In This Document

Related Documentation

For Hosting Providers

Click the tabs below to view each filter option.

AllSelect all of the domains, regardless of type.

Select only the main domains. For example:


Select only the subdomains. For example:

Addon Domains

Select only the addon domains. For example:

Parked Domains

Select only the parked domains. For example:

www and mail domain

Select only the www and mail subdomains. For example:

Proxy subdomains

Select only the proxy subdomains. For example:

AllSelect all of the domains, regardless of certificate type.

Select only the unsecured domains. No certificates secure these domains.


We strongly recommend that you secure all of the domains that you visitors may view.

Self-SignedSelect only the domains that a self-signed certificate secures.
AutoSSL DV CertificateSelect only the domains that an AutoSSL-issued domain validated (DV) certificate secures.
DV CertificateSelect only the domains that a DV certificate secures.
OV CertificateSelect only the domains that a organization validated (OV) certificate secures.
EV CertificateSelect only the domains that a Extended Validation (EV) certificate secures.
AllSelect all of the domains, regardless of certificate status.
ActiveSelect only the domains that active certificates secure.
ExpiredSelect only the domains with an expired certificate.
Expiring SoonSelect only the domains secured by certificates that expire soon.
UnsecuredSelect only the domains that no certificate secures.
Has AutoSSL Problems

Select only the domains with AutoSSL problems. For example:

This domain does not resolve to an IPv4 address on the internet.


Some providers require a CAA record in the domain's DNS zone file to issue certificates through AutoSSL. For more information, read our Zone Editor documentation.

AllSelect all of the domains, regardless of AutoSSL status.

Select only the domains that AutoSSL includes.

ExcludedSelect only the domains that AutoSSL does not include.

The Domains table

The Domains table displays each domain's certificate and provides options to view or upgrade the certificate.


You can click on a lock icon to upgrade your certificate.

Domain — This column displays a complete or filtered list of all domains on the cPanel account.

Certificate — This column graphically represents all or the certificates for a quick reference.

  •  — Self-Signed certificate
  •  — Domain validated (DV) certificate not via AutoSSL
  •  — Domain validated (DV) certificate via AutoSSL
  •  — Organization validated (OV) certificate
  •  — Extended validation (EV) certificate

Actions — This column displays applicable options to view, upgrade, or purchase the certificate that secures each domain. You can also include or exclude each domain from AutoSSL.

  • View Certificate — View the certificate of the domain if the certificate exists. The Manage SSL Hosts section of cPanel's SSL/TLS  interface (Home >> Security >> SSL/TLS) will appear in a new window.
  • Upgrade Certificate or  Purchase Certificate  — Upgrade or purchase a certificate for the domain. cPanel's SSL/TLS Wizard interface (Home >> Security >> SSL/TLS Wizard)  will appear, which will display the specified domain and available certificates.


    These actions only appear for applicable domains.

  • Include during AutoSSL or Exclude from AutoSSL — Apply or remove AutoSSL for this domain. For more information about AutoSSL, read our Manage AutoSSL documentation.


    To select multiple domains, perform the following steps:

    1. Select or deselect the checkboxes to add or remove the applicable domains.
    2. Click Include Domains during AutoSSL or Exclude Domains during AutoSSL at the top-left of the interface. For example, click Include 5 Domains during AutoSSL.
  • No labels