Today I registered a new domain name and created a new website for it using cPanel. It is an add-on domain in a subdirectory on the main one. Everything works fine except every time I run Auto SSL it only creates self signed certificates. Every other time I have ever created an add-on domain in this fashion I have never had a problem with Auto SSL.
It is issuing the certificates to the subdomain created when adding the domain instead of the real domain. Whenever an add-on domain is created and it does not share the root directory of the main domain it creates a subdomain. Such as exampleaddon.com.examplemain.com but usually the SSL certificate is issued to exampleaddon.com. How do I make Auto SSL issue the certificate to the right domain?
I tried uninstalling the SSL host for the domain hoping to recreate it by running Auto SSL again but now the entire site is broken. My files are all still in the right directory on the file system but instead it loads just a link to the cgi bin.
Seems there is issues with AutoSSL due to maintenance with Sectigo/Comodo, Have noticed this coming back on SSL requests since they started a DB upgrade this morning:
The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later.
The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later.
Scheduled to run for another 6 hours as per (Sectigo)
To verify if yours is the same you can try run this over command line if you have access:
/usr/local/cpanel/bin/autossl_check --user=username
Replacing 'username' with the one for your cPanel account.
The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later.
The “cPanel (powered by Sectigo)” provider cannot currently accept incoming requests. The system will try again later.
Scheduled to run for another 6 hours as per (Sectigo)
To verify if yours is the same you can try run this over command line if you have access:
/usr/local/cpanel/bin/autossl_check --user=username
Replacing 'username' with the one for your cPanel account.
Last edited:
Here are some logs for Auto SSL
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).
I don't think cPanel AutoSSL ever creeates self-signed certificates
Go to cPanel -> Security -> SSL/TLS Status and see what it says about that domain.
There you can check that domain and click Run AutoSSL.
Do you have only cPanel access, or (root) WHM?
Go to cPanel -> Security -> SSL/TLS Status and see what it says about that domain.
There you can check that domain and click Run AutoSSL.
Do you have only cPanel access, or (root) WHM?
It's important that the DNS is fully functional for the domain that is trying to get an SSL certificate. For this situation it would be worth checking the DNS using a tool like intoDNS: checks DNS and mail servers health to ensure there are no issues.