HF PanelDocsv1.0.0

Get free SSL on every domain

Make sure every domain and subdomain has a free Let's Encrypt certificate, fix the ones that don't, force https:// and add a wildcard.

HF Panel gives every domain a free Let's Encrypt certificate and renews it by itself. This tutorial checks that each of your domains really has one, fixes the usual reasons one is missing, and switches every site to https://.

You need: a hosting account with at least one domain.

1. Look at the certificates

Open Control Panel › Domains › SSL/TLS. Each domain, subdomain and parked domain has a row:

You see It means
Let's Encrypt (free) done. It renews by itself.
None, with "AutoSSL: the domain doesn't point here yet" DNS is not pointing at the server yet (step 2)
Your own a certificate you installed yourself. It does not renew by itself.
Expires in amber or red fewer than 30 or 14 days left

2. Fix "doesn't point here yet"

AutoSSL can only get a certificate for a name that points at this server, and it checks over http://.

  1. Open Domains › DNS setup, click the domain and add the records marked ✘. Don't forget www.
  2. Click Check again until they show ✔.
  3. Back on SSL/TLS, click Get free SSL on the domain's row, or simply wait: AutoSSL tries again by itself.

See Point a domain bought elsewhere.

Important: keep port 80 open. Redirecting http:// to https:// is fine; blocking port 80 stops renewals.

3. Get a certificate straight away

For a domain that already points here but shows None:

  1. Click Get free SSL on its row.
  2. Watch the steps in the live window.

When it is done, Always https:// is switched on for that domain.

4. Send everyone to https://

In the Always https:// column, click Off to switch it On for every domain that should only be used over https://.

For WordPress, also update the site's own address so pages and images load over https://:

  1. Open Websites › WordPress and choose the site.
  2. In Change the address, enter the New address, for example https://example.com.
  3. Click Dry run, then Replace.

5. Cover every subdomain with a wildcard (optional)

When the domain uses the server's nameservers, one certificate can cover example.com and *.example.com, including subdomains you add later.

  1. Click More on the main domain's row.
  2. Under Wildcard certificate, click Get wildcard SSL.

The option only appears when the server runs DNS for your account.

6. Replace a certificate you bought

A certificate under Your own never renews by itself. Before it expires, either install the renewed one under More › Install your own certificate, or remove it with More › Remove SSL and click Get free SSL to go back to free certificates.