How to install an SSL certificate in cPanel
Install a free Let's Encrypt certificate automatically via AutoSSL, or manually install a paid SSL certificate using cPanel's SSL/TLS Manager.
UnderHost NOC
Network Operations
On this page
UnderHost shared hosting uses AutoSSL to automatically provision and renew free Let's Encrypt SSL certificates for all domains on your account. For most users, AutoSSL handles everything without manual steps.
AutoSSL-automatic free SSL
AutoSSL runs automatically when you add a domain to cPanel. If your domain's DNS is pointing to the server, a Let's Encrypt certificate is typically provisioned within minutes to a few hours.
To manually trigger AutoSSL for your domains:
- Log in to cPanel
- Go to Security → SSL/TLS Status
- You see a list of all domains with their certificate status
- Click Run AutoSSL to check and issue new certificates
Check AutoSSL status
In SSL/TLS Status, each domain shows one of these states:
| Status | Meaning |
|---|---|
| ✓ Certificate Valid | SSL is installed and valid |
| ⚠ Certificate Expiring | Certificate expires soon-AutoSSL will renew before expiry |
| ✗ Domain not covered | No certificate installed-DNS may not be pointing to this server yet |
| ✗ DNS DCV failed | AutoSSL could not verify domain ownership-check DNS settings |
AutoSSL verifies domain ownership by making an HTTP request to the domain. If the domain's DNS is still pointing elsewhere (e.g., old host), AutoSSL cannot issue the certificate. Point DNS to UnderHost first, wait for propagation, then run AutoSSL.
Install a paid certificate manually
- Purchase the certificate from your CA. When ordering, generate or upload a CSR (Certificate Signing Request). In cPanel: Security → SSL/TLS → Generate an SSL Certificate and Signing Request.
- After the CA validates and issues the certificate, you receive: the certificate (.crt file), the private key, and the CA bundle (chain of intermediate certificates).
- In cPanel, go to Security → SSL/TLS → Install and Manage SSL for your site (HTTPS)
- Select the domain
- Paste the certificate, private key, and CA bundle into the corresponding fields
- Click Install Certificate
Force HTTPS after installation
After SSL is installed, redirect all HTTP traffic to HTTPS. Add this to your .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]WordPress users: go to Settings → General and change both URLs from http:// to https://. Then use a plugin like Really Simple SSL to catch mixed content.
Having SSL installation issues?
Our support team can install SSL certificates or help troubleshoot certificate problems.
