Topics Map > Communication and collaboration > cPanel web hosting

cPanel, Run AutoSSL Manually

Occasionally AutoSSL fails to run automatically and an SSL certificate expires. You can Run AutoSSL manually using the "SSL/TLS Status" feature from your cPanel dashboard.
Symptoms of an expired SSL Certificate:
  • Visitors to your site see a warning message when they visit https://accountname.web.illinois.edu
  • Visitors to your site see a warning message when they visit http://accountname.web.illinois.edu if you have "Force HTTPS Redirect" enabled
  • Visitors to your site see a warning message when they visit https://yourcustomdomain.illinois.edu
  • Visitors to your site see a warning message when they visit http://yourcustomdomain.illinois.edu if you have "Force HTTPS Redirect" enabled
Solution:
  1. Visit https://web.illinois.edu
  2. Click "Illinois Login"
  3. Follow the login process to access your cPanel account list
  4. Click on the account that is exhibiting this issue
  5. Click "SSL/TLS Status"
  6. Review the status of the certificates
  7. Click the "Run AutoSSL" button (this button can take 10-30 seconds to appear after loading the page)
  8. Wait for the message that AutoSSL is complete; the page will reload
  9. Review the status of the certificates and any error messages that were received
  10. Errors for domains you are not using, such as www.customdomain.illinois.edu or mail.customdomain.illinois.edu can be safely ignored

Note:

If your certificate is not yet expired, autoSSL uses the following criteria to determine whether a new certificate will be issued:

  1. If the existing certificate is self-signed or if there is no certificate installed, autoSSL will attempt to request and install a new certificate
  2. If a certificate that was previously issued by autoSSL will expired within 10 days, autoSSL will attempt to request and install a new certificate
  3. If a certificate from a different provider is currently installed, autoSSL will only attempt to replace it when it is within 3 days of expiration

If autoSSL requests a new certificate, there can be a delay between that request and successful installation of the certificate.

It is also possible that autoSSL will fail to request/install a new certificate for a variety of reasons. Handling the possibility of failures is built-in to the process for autoSSL renewals, and in most cases the next attempt to renew the certificate will succeed. If you are within a couple of days of expiration and still unable to get a new certificate to install through autoSSL, the Web Hosting team can check the system logs for any unusual blockers that can be cleared to allow the certificate issuance to succeed. You can open a ticket with the team at https://go.illinois.edu/cpanelhelp.



Keywords:
cPanel, web hosting, SSL, AutoSSL 
Doc ID:
116810
Owned by:
Web H. in University of Illinois Technology Services
Created:
2022-02-16
Updated:
2025-01-23
Sites:
University of Illinois Technology Services