First identify where HTTPS is failing: certificate issuance, certificate trust or hostname coverage, page content, or the HTTP-to-HTTPS redirect. These are different problems and need different fixes. Record the exact browser error and test the actual domain—both the apex name and www version if you use them—not just the server IP.
Start by identifying the failure
“SSL not working” can describe a certificate that was never issued, a browser rejecting the certificate, a page that still loads insecure resources, or a redirect that fails. Note which hostname you tested and what happens: an AutoSSL error, a browser certificate warning, an insecure-page indicator, or a failed redirect. The hostname matters because a certificate may cover one version of a domain but not another.
As an Amazon Associate I earn from qualifying purchases.
Testing by server IP is not a substitute for testing the domain. Certificates are generally issued for domain names, so visiting the IP directly can trigger a verification error. A warning can also mean the server is presenting a self-signed certificate or one whose name does not match the requested domain. cPanel explains these verification errors.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →If AutoSSL cannot issue or renew a certificate
Check where the domain resolves
For cPanel AutoSSL, the hostname being validated needs to resolve to an IP address assigned to the hosting server and account. Check the relevant A and AAAA records for the exact hostname, including www if applicable. Make changes at the provider that hosts the domain’s authoritative DNS zone; that may not be cPanel.
#1 Best Overall
cPanel documents failures where a domain does not resolve, resolves to an IP not bound to the server, or a validation request cannot retrieve the expected file. A 404 alone does not prove DNS is the cause: use the AutoSSL log to see which validation failed. cPanel’s AutoSSL DNS troubleshooting article describes these cases. Ehsan Dowlatshah, author of that support article, writes: “This means AutoSSL has problems resolving a domain to an IP address, either because the domain is not resolving to any IP address or is resolving to an IP address that is not bound to the server.”
Understand the validation method
HTTP domain control validation (DCV) retrieves a temporary file from the website. DNS DCV places a record in the domain’s DNS zone. Either method can validate a domain when it succeeds. If DNS is hosted outside the cPanel/WHM server, cPanel cannot use its DNS DCV process to edit that external zone; ask the host which supported validation route is available. cPanel outlines the difference between HTTP DCV and DNS DCV.
Rank #2
If the browser rejects the certificate
A trusted certificate must cover the hostname visitors requested. A self-signed certificate does not provide the CA trust browsers expect; a hostname mismatch means the certificate does not cover that domain name. Check the apex and www name separately, and ask your hosting provider to verify certificate coverage and which certificate the server is presenting for each hostname.
Free tools Windows power users keep installed
One-click scans. No signup required.
Do not tell visitors to click through a certificate warning on a public website. If you use shared hosting and cannot select the certificate or virtual host yourself, send the exact hostname and browser error to the provider. cPanel’s SSL troubleshooting guide also covers server-side installation problems, including mismatched certificate and private-key pairs.
If HTTPS loads but the page still looks insecure
A valid certificate does not automatically change every URL embedded in your site. If a page loads images, scripts, stylesheets, fonts, embeds, or form actions over http://, the browser may flag mixed content even though the page itself uses HTTPS.
- Confirm that the certificate is valid for the hostname and that the page loads over HTTPS.
- Inspect the page and its CMS settings for resource URLs that still begin with
http://. - Update those URLs to HTTPS where the resource supports it, then reload and retest the affected page.
This is a page-content issue, not a certificate-issuance failure. See cPanel’s mixed-content troubleshooting guidance.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If visitors are not redirected to HTTPS
A redirect sends visitors from HTTP to HTTPS; it does not create or repair the certificate. Confirm that HTTPS already works without a warning before enabling a redirect.
Recommended Free Tools
In cPanel, use the HTTPS redirect control for the domain in question. The control requires a valid certificate. For an addon domain, the associated subdomain may also need its redirect toggle enabled; aliases do not show that toggle. WordPress or another CMS may have its own redirect rules that conflict with the cPanel setting. If the control is missing or a redirect loop starts, review the CMS and server redirect configuration and contact your host or site developer. cPanel documents the HTTPS redirect behavior and its limitations.
What to send your hosting provider
Shared-hosting accounts generally do not have access to WHM or Apache virtual-host configuration, so some certificate fixes require provider-side changes. A concise support request helps the provider distinguish DNS, account binding, and certificate-selection problems.
- The exact hostname or hostnames affected, and whether the apex and
wwwversions behave differently. - The exact browser error or the relevant SSL/TLS Status and AutoSSL log output.
- The current A and AAAA destinations for the affected hostname, and the time you tested.
- Whether the problem is issuance or renewal, a certificate warning, mixed content, or a redirect failure.
Ask the provider to check AutoSSL eligibility and provider configuration, the domain’s IP binding to the account, certificate coverage, certificate/private-key pairing, and which certificate and virtual host the server presents. cPanel’s SSL troubleshooting documentation and AutoSSL documentation describe the relevant server-side areas. Other hosting panels may use different labels or restrict controls, so use your provider’s instructions for its panel.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →
