How to Install SSL in cPanel
For free SSL, point the domain at the server, open Security → SSL/TLS Status in cPanel, select the domain and click Run AutoSSL. For a purchased certificate, paste the CRT, private key and CA bundle under SSL/TLS → Manage SSL sites and click Install Certificate. Then switch on Force HTTPS Redirect.
For cPanel site owners adding HTTPS with a free AutoSSL certificate or a paid Sectigo certificate.
knowledge
- Read time
- 5 min
- Sections
- 7
- Updated
- 14 Nov 2026
- Written by
- WebJi® team
Last editorial update: 14 November 2026. Prices follow the dated sources on this page; checkout confirms current charges.
Which SSL option should you install in cPanel?
For most sites, the free AutoSSL certificate is enough; buy a certificate only when you need a one-year term, a wildcard, or a specific certificate authority. Both give the same encryption; they differ in validity, names covered and who issues them.
| Route | Use it when | Price before 18% GST |
|---|---|---|
| AutoSSL (free, domain-validated) | The domain points at this server and a standard padlock is enough | Included with hosting |
| Sectigo Positive SSL | You want a one-year certificate for the domain and www | ₹1,800 a year |
| Sectigo Positive SSL Wildcard | One certificate must cover all first-level subdomains | ₹7,500 a year |
Paid certificates are ordered from WebJi® SSL certificates; free vs paid SSL explains when the extra cost is worth it. Windows hosting uses Plesk, where the steps differ.
How do you install free SSL with AutoSSL in cPanel?
Point the domain’s A record at the hosting server, open Security → SSL/TLS Status, select the domain and click Run AutoSSL; a certificate is usually issued within minutes. Then switch on Force HTTPS Redirect.
- Confirm DNS: the domain and www resolve to this server’s IP (check with an SSL checker or
dig). - Log in to cPanel (usually on port 2083) and open Security → SSL/TLS Status.
- Tick the domain and its www entry, then click Run AutoSSL.
- Wait for the rows to turn green, then open Domains and switch on Force HTTPS Redirect.
AutoSSL renews the certificate automatically while the domain still points at the server. On WebJi® cPanel hosting the button is in your own cPanel, not in WHM.
How do you install a purchased SSL certificate in cPanel?
Generate a CSR in cPanel if the certificate authority needs one, then paste the issued certificate (CRT), private key and CA bundle under SSL/TLS → Manage SSL sites and click Install Certificate. The private key must match the CSR used to issue the certificate.
- CSR: Security → SSL/TLS → Certificate Signing Requests. Use a 2,048-bit or larger key, the exact hostname and your organisation details, then send the block from BEGIN to END CERTIFICATE REQUEST to the CA. The key stays on the server.
- Validation: complete the CA’s email, file or DNS check.
- Install: open SSL/TLS → Manage SSL sites, choose the domain, paste the CRT including BEGIN and END lines, and use Autofill by Domain to fetch the matching key.
- Bundle: paste the CA bundle if the box is empty, then click Install Certificate.
Typical files are named certificate.crt, ca_bundle.crt and private.key. Do not generate a new CSR after issuance; the new key will not match the certificate. A green row in SSL/TLS Status and a padlock on https:// confirm success.
How do you install a wildcard SSL certificate in cPanel?
Order the wildcard for *.yourdomain.com, prove control with the DNS TXT record the CA gives you, then install the files on Manage SSL sites exactly like a single-name certificate. A wildcard covers one level of subdomains, such as shop.yourdomain.com, not a.b.yourdomain.com.
Whether the bare domain is included depends on the certificate, so confirm it in the order. Add the validation record as described in add a TXT record in cPanel. AutoSSL on a shared account does not replace a paid wildcard; the WebJi® Positive SSL Wildcard costs ₹7,500 a year before 18% GST.
How do you force HTTPS and fix mixed content?
Switch on Force HTTPS Redirect for the domain under Domains in cPanel, then replace any http:// links to images, stylesheets and scripts, because one insecure file removes the padlock.
- View the page source and search for
http://on your own domain. - In WordPress, set both WordPress Address and Site Address to https:// under Settings → General.
- Update hard-coded URLs in theme options, page builders and menus.
- Clear any cache plugin and CDN after changes.
If the warning persists, work through SSL not working.
Why does AutoSSL fail, and how do you fix it?
AutoSSL fails when the certificate authority cannot confirm you control the domain, usually because DNS points elsewhere, a proxy intercepts the check, or a CAA record blocks the issuer. Fix the cause and run AutoSSL again.
| Cause | Fix |
|---|---|
| A record points to old hosting | Update DNS and wait for the old TTL |
| Cloudflare proxy on | Pause the proxy during validation, or use a Cloudflare origin certificate |
| CAA record excludes the issuer | Add the AutoSSL provider (for example letsencrypt.org or sectigo.com); see CAA records |
| www does not resolve | Add an A or CNAME record for www |
| Redirect or password rule blocks the check path | Exclude /.well-known/ from the rule, run AutoSSL, then restore |
The log under SSL/TLS Status names the reason for each domain; send it to support@webji.services if the cause is unclear.
How are SSL certificates renewed in cPanel?
AutoSSL certificates renew automatically before they expire as long as validation keeps passing; purchased certificates must be renewed with the CA and the new files pasted in again.
Free certificates are short-lived — Let’s Encrypt issues 90-day certificates today and plans 64 days from February 2027 and 45 days from February 2028 — so automatic renewal matters more each year; see Let’s Encrypt auto-renew. For a one-year paid certificate, set a reminder a month before expiry. A red row in SSL/TLS Status means the certificate is missing or expired; a green row with a browser warning usually means mixed content or a hostname not on the certificate.
Frequently asked questions
Is the free AutoSSL certificate trusted by all browsers?
Yes. AutoSSL certificates come from publicly trusted authorities such as Let’s Encrypt or Sectigo, and current browsers and phones trust them. Very old devices may lack newer root certificates, which affects free and paid certificates alike.
Do I need a dedicated IP address to install SSL in cPanel?
No. Modern browsers use SNI, which lets many certificates share one IP address. A dedicated IP is only needed for unusual legacy clients or specific software requirements.
Can I install SSL on a subdomain in cPanel?
Yes. Subdomains created in cPanel appear in SSL/TLS Status and AutoSSL covers them once their DNS points at the server. For many subdomains, a wildcard certificate can be simpler to manage.
How do I install SSL from WHM for all accounts?
Server administrators manage AutoSSL providers and service certificates in WHM rather than cPanel. That applies to VPS and reseller owners; the steps are in install SSL in WHM.
Last editorial update: 15 November 2026. Prices follow the dated sources on this page; checkout confirms current charges.
Ready to get started with WebJi®?
Join 12,000+ businesses across India and overseas. INR pricing, 18% GST shown before payment and 24/7 email support in Hindi and English — average first reply under 60 minutes.