The SSL/TLS Status interface in cPanel allows you to view, manage, and renew SSL certificates for your domains. You can check certificate details, see which domains need security, and ensure all your sites use encrypted connections to protect visitor data.
Understanding the SSL/TLS Status Interface
This cPanel tool provides a centralized dashboard where you can monitor the security status of all domains associated with your hosting account. The interface displays which domains have active SSL/TLS certificates, which ones are expiring soon, and which domains remain unsecured.
SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) encrypt data transmitted between your website and visitors' browsers. Modern web hosting platforms support TLS version 1.2 and TLS version 1.3, with TLS 1.2 enabled by default for maximum compatibility. Note that TLS 1.3 requires OpenSSL 1.1.1 or higher and may not be supported by older browsers or systems.
Managing Certificate Authority Authentication (CAA) Records
Certificate Authority Authentication records in your domain's DNS zone file control which Certificate Authorities can issue SSL certificates for your domain. Understanding how CAA records work helps prevent unauthorized certificate issuance:
- If no CAA records exist for your domain, any Certificate Authority can issue certificates
- If CAA records are present, only the specified CAs can issue certificates
- Conflicting CAA records must be removed or updated before obtaining certificates from a different CA
You can manage CAA records through the Zone Editor interface in cPanel (Home > Domains > Zone Editor). Always check your chosen Certificate Authority's documentation for their specific CAA record requirements.
Using the Purchase Certificates Banner
The banner at the top of the SSL/TLS Status interface provides quick access to essential certificate management functions:
Purchase Certificates: This option redirects you to the SSL/TLS Wizard interface (cPanel > Home > Security > SSL/TLS Wizard), where you can obtain new SSL certificates for your domains through OBHost's integrated certificate providers.
Show Unsecured Domains: This filter displays only domains without valid SSL certificates, making it easy to identify and secure vulnerable sites. We strongly recommend securing all domains that visitors can access, as unsecured connections trigger browser warnings and can damage your site's credibility.
Searching and Filtering Your Domains
The search functionality helps you quickly locate specific domains in your certificate list. Enter all or part of a domain name in the search box to filter the results instantly. The interface also includes advanced filtering options accessible through the settings icon, allowing you to sort and display domains based on various criteria such as certificate expiration date, issuer, or security status.
The Domains Table Overview
The main domains table displays comprehensive information about each domain's SSL/TLS status. You can view certificate details including the issuing authority, validity period, and expiration date. This centralized view makes it simple to track certificate renewals and maintain continuous security across all your domains. Click on any domain to access detailed certificate information and management options.
Best Practices for SSL/TLS Management
Maintaining secure connections requires regular monitoring and proactive certificate management. Check your SSL/TLS status regularly to ensure certificates remain valid and renew them before expiration to avoid service interruptions. Most Certificate Authorities send renewal reminders, but manual checks help prevent unexpected lapses in security.
Always secure both your primary domain and all subdomains or addon domains. Visitors may access your site through multiple entry points, and any unsecured connection creates vulnerability. Modern browsers display prominent warnings for sites without SSL/TLS encryption, which can significantly reduce visitor trust and engagement.
What happens if my SSL certificate expires?
When an SSL certificate expires, browsers will display security warnings to visitors attempting to access your site. These warnings often prevent users from proceeding to your site, resulting in lost traffic and potential revenue. Most browsers now mark sites without valid SSL certificates as "Not Secure" in the address bar, even if the certificate simply expired rather than being malicious.
Can I use free SSL certificates with my hosting?
Yes, OBHost supports free SSL certificates through automated certificate providers. These certificates provide the same level of encryption as paid options and are ideal for most websites. The SSL/TLS Status interface allows you to view and manage both free and premium certificates from a single dashboard, making it easy to maintain security regardless of certificate type.
How do I renew an SSL certificate through this interface?
The SSL/TLS Status interface displays expiration dates for all certificates and provides renewal options. Click on the domain with an expiring certificate to access renewal settings. Many hosting providers, including OBHost, offer automated renewal for supported certificate types, ensuring your sites remain secure without manual intervention. For certificates requiring manual renewal, the interface guides you through the process step by step.
Why should I secure domains that visitors don't directly access?
Even domains that don't receive direct visitor traffic should be secured with SSL/TLS certificates. Search engines penalize sites without proper security, affecting your rankings even for secured domains on the same server. Additionally, unsecured domains can be exploited for phishing or other malicious activities that damage your hosting account's reputation and potentially lead to blacklisting.
The OBHost support team is available 24/7 to help you manage SSL/TLS certificates and secure your domains. Visit our contact page or email support@obhost.org for assistance with certificate installation, renewal, or troubleshooting.
