How to Install a Free SSL Certificate in cPanel

An SSL certificate encrypts the connection between your visitors and your website, and it turns http:// into https://. On many cPanel hosting accounts, free domain-validated certificates can be issued and renewed automatically. This guide shows you how to check your certificate status and get HTTPS working.

New to SSL? Start with SSL certificates explained.

Before you start

• Your domain must point to your hosting. The certificate authority checks that the domain resolves to your server. If you recently changed nameservers or DNS records, wait for the change to take effect.
• Include both versions of your domain. Make sure both yourdomain.com and www.yourdomain.com point to the same hosting account.
• Check for blocking rules. Security settings or redirects that block access to validation files can prevent certificates from being issued.

Step 1: Log in to cPanel

Open your hosting control panel from the Client Area or your cPanel login link.

Step 2: Open the SSL/TLS Status tool

In the Security section, click SSL/TLS Status. You will see a list of your domains and subdomains, each with an icon showing whether it has a valid certificate.

Step 3: Run AutoSSL

1. Select the domains you want to secure, or leave all selected.
2. Click Run AutoSSL.
3. Wait while cPanel validates your domains and requests certificates. This can take a few minutes.
4. Refresh the page. Secured domains show a green padlock and an expiry date.

If the AutoSSL option is not visible, contact support so it can be checked or enabled for your account.

Step 4: Read any error messages

If a domain fails validation, cPanel shows a reason. Common causes include:

• The domain or www subdomain points to a different server
• DNS changes have not finished updating
• A redirect or firewall blocks the validation request
• The domain has expired

Fix the issue, then run AutoSSL again. See common SSL certificate errors for more help.

Step 5: Test your website over HTTPS

Visit https://yourdomain.com and https://www.yourdomain.com. You should see a padlock in the browser address bar. Click it to view certificate details such as the issuer and expiry date.

Step 6: Redirect all visitors to HTTPS

Installing a certificate does not automatically send visitors to the secure version. Set up a permanent redirect so everyone uses HTTPS. Follow our guide on how to force HTTPS.

Step 7: Fix mixed content

If the padlock is missing on some pages, images or scripts may still load over HTTP. Learn how to fix mixed content warnings.

What about renewals?

Free certificates are valid for a short period and are renewed automatically by AutoSSL, as long as your domain keeps pointing to the hosting account and validation continues to succeed. Check SSL/TLS Status occasionally, especially after DNS changes.

Final thoughts

Free SSL is quick to set up and protects every visitor. If AutoSSL keeps failing for your domain, contact Salama Hosting support with the domain name and the error shown.