SSL in CloudPanel: Let's Encrypt and custom certs

CloudPanel integrates Let's Encrypt for free, automatic SSL certificates per site. Once issued, certificates auto-renew before expiry. The only requirement is that the domain must already be pointing at the server when you request the certificate.

Before issuing SSL

Let's Encrypt validates domain ownership by making an HTTP request to your domain. This means:

• The domain's A record must point to your CloudPanel server's IP address
• DNS changes must have propagated (usually a few minutes to a few hours)
• Port 80 must not be blocked by the server firewall (CloudPanel's default firewall allows port 80)

Verify DNS is pointing correctly with the UnderHost DNS Check tool before requesting the certificate.

Issue a Let's Encrypt certificate

1. Open the SSL settings

   Log in to CloudPanel, click Sites, then click the site you want to secure. Go to the SSL/TLS tab.

2. Select Let's Encrypt

   Under SSL Provider, choose Let's Encrypt.

3. Save and install

   Click Save & Install Certificate. CloudPanel contacts Let's Encrypt, completes the HTTP-01 validation, and installs the certificate. The process takes 10–30 seconds.

After successful issuance, the site's status in the panel shows the certificate expiry date. CloudPanel automatically renews the certificate before expiry.

Force HTTPS

In CloudPanel, you can force HTTPS from the SSL/TLS settings:

1. In the site's SSL/TLS tab, enable Force HTTPS (or "HTTPS Redirect")
2. Save the settings

This adds a redirect rule to the Nginx vHost that sends all HTTP traffic to HTTPS. Visitors who access http://yourdomain.com are automatically redirected to https://yourdomain.com.

For WordPress sites, also update the site URL to HTTPS in WordPress admin → Settings → General.

Certificate renewal

Let's Encrypt certificates are valid for 90 days. CloudPanel uses acme.sh internally to handle automatic renewal. You do not need to manually renew certificates.

If a certificate expires (rare-usually due to DNS changes or server issues), re-issue it manually using the same steps above.

Custom SSL certificate

If you have a purchased SSL certificate, install it in CloudPanel:

1. In the site's SSL/TLS tab, select Custom Certificate
2. Paste your certificate (.crt file contents) into the Certificate field
3. Paste your private key into the Private Key field
4. Paste the CA bundle / intermediate certificates into the Certificate Chain field if provided
5. Click Save & Install Certificate

Troubleshoot SSL failures

Related: How to create a website in CloudPanel | How to point a domain to a CloudPanel server | Fixing mixed content warnings on HTTPS sites | How to set up Cloudflare with UnderHost hosting | SSL certificates explained-types, validation, and how they work

Related articles