Missing cPanel-Signed SSL Certs for subdomains

[jimhermann]

cPanel Folks,

Why are there Missing cPanel-Signed SSL Certs for some subdomains and how do I fix it?

Many sites have cPanel-Signed SSL Certs for all subdomains.

Some sites have cPanel-Signed SSL Certs for subdomains but not the main domain or www subdomain.

I have Auto-SSL turned ON by default and all users are set to Reset to Default.

I executed Check Auto-SSL for individual users and for ALL users. No change.

I migrated this server from an old server with a previous version of cpanel. Maybe that's the root cause.

Thanks,

Jim​

 

[cPanelMichael]

Hello,

Do you notice any errors reported for the affected accounts under the "Logs" tab in "WHM >> Manage AutoSSL"?

Thank you.

 

[jimhermann]

There are multiple log warnings like this:

12:01:14 PM WARN The domain “blog.xxxxxx.org” failed domain control validation: The system queried for a temporary file at “http://blog.xxxxx.org/.well-known/pki-validation/0343EF5608E10044E87CF5EA6F752405.txt”, but the web server responded with the following error: 403 (Forbidden). A DNS (Domain Name System) or web server misconfiguration may exist.

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can take a closer look to see why domain validation is failing?

Thank you.