How to Install a Free Let's Encrypt SSL Certificate in cPanel: Step-by-Step Guide

In 2025, running a website without HTTPS means browser warnings, Google ranking penalties, and visitors who leave before reading a single line. The good news: a trusted, valid SSL certificate doesn't have to cost anything. Let's Encrypt issues free SSL/TLS certificates recognised by every modern browser, and its native integration with cPanel makes the entire process straightforward — no command-line experience required.

This guide walks you through installing a Let's Encrypt SSL certificate on a cPanel shared hosting plan, forcing HTTPS, and handling the most common pitfalls.

---

What Is Let's Encrypt and Why Should You Use It?

Let's Encrypt is a non-profit Certificate Authority (CA) launched in 2016. It issues free, automated SSL/TLS certificates using the ACME protocol. Here's why it's become the industry standard:

• Zero cost — no fees for issuance or renewal, ever.
• Automated validation — your domain ownership is verified automatically.
• Universal browser support — trusted by Chrome, Firefox, Safari, Edge and all major browsers.
• Auto-renewal — certificates last 90 days, but cPanel renews them automatically.
• No technical complexity — on cPanel shared hosting, everything is handled through the graphical interface.

One limitation to be aware of: Let's Encrypt issues DV (Domain Validation) certificates only — they confirm domain ownership but not organisational identity. For large e-commerce sites, banks, or institutions that require OV or EV certificates, check our SSL certificate catalogue.

---

Prerequisites

Before you start, make sure:

1. You have cPanel access — you can log in to your hosting control panel.
2. Your domain DNS is correctly configured — the domain must point to your server's IP. DNS propagation takes between 15 minutes and 48 hours.
3. Your hosting supports Let's Encrypt — all CLIQHOST shared hosting plans include native Let's Encrypt integration via AutoSSL.
4. No conflicting certificate is installed — if another SSL certificate is already active, remove it first.

---

Step 1: Log Into cPanel and Locate the SSL/TLS Section

1. Log into cPanel (typically at https://yourdomain.com:2083 or via the link in your welcome email).
2. In the cPanel search bar, type "SSL".
3. You'll see several options — select "SSL/TLS Status" (or "Let's Encrypt™ SSL" if it appears as a separate item).

In modern cPanel versions (96+), a dedicated "Let's Encrypt™ SSL" button is available that streamlines the workflow even further.

---

Step 2: Select Your Domain and Issue the Certificate

1. On the SSL/TLS Status page, you'll see a list of all domains and subdomains in your account.
2. Domains without SSL are marked with a red icon or labelled "No SSL".
3. Tick your primary domain (e.g. example.com) and, if needed, www.example.com.
4. Click "Run AutoSSL" (or "Issue" if using the dedicated Let's Encrypt module).

cPanel will contact Let's Encrypt servers, validate your domain, and issue the certificate within a few seconds to a few minutes.

Tip: Always tick both example.com and www.example.com to ensure the certificate covers both versions of your site.

---

Step 3: Verify the Certificate Installation

Once the process completes:

1. Return to SSL/TLS Status — your domain should now show a green tick and an expiry date (~90 days from now).
2. Open a browser and navigate to https://example.com — you should see the padlock icon in the address bar.
3. For a detailed security analysis, run your domain through SSL Labs.

---

Step 4: Force HTTPS (301 Redirect)

Installing the certificate doesn't automatically redirect visitors to HTTPS. You need to redirect all HTTP traffic to the secure version.

Method 1: Through cPanel (easiest)

1. In cPanel, find and open "Domains" or "Redirects".
2. Select your domain and enable the "Force HTTPS Redirect" toggle.

Method 2: Via .htaccess (for PHP/Apache sites)

Add the following lines at the very top of the .htaccess file in your public_html directory:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Method 3: For WordPress Sites

If your site runs on WordPress, after enabling SSL:

1. Go to WordPress Admin → Settings → General.
2. Change http:// to https:// in both the WordPress Address (URL) and Site Address (URL) fields.
3. Save your changes.
4. Install the Really Simple SSL plugin — it handles redirects automatically and fixes mixed-content issues.

For a fully optimised WordPress environment, take a look at CLIQHOST's WordPress hosting plans, built for speed and security.

---

Step 5: Fix Mixed Content Issues

After enabling HTTPS, you may encounter mixed content warnings — the page loads over HTTPS, but some resources (images, scripts, CSS files) are still requested over HTTP.

Fixes:

• WordPress: Use the Really Simple SSL or Better Search Replace plugin to update all HTTP references in the database.
• Static HTML: Manually search your source code for http:// and replace with https:// or protocol-relative paths (//example.com/image.jpg).
• Verification: Use WhyNoPadlock.com to identify any remaining insecure resources.

---

Automatic Renewal: Set It and Forget It

One of the biggest advantages of Let's Encrypt in cPanel is fully automatic renewal. cPanel's AutoSSL task runs daily, checks certificate expiry dates, and renews them at least 15 days before they expire — no manual action needed.

To check status or trigger renewal manually:

1. Go to cPanel → SSL/TLS Status.
2. Click "Run AutoSSL".
3. The process runs in the background; you'll receive a notification when it completes.

If AutoSSL keeps failing, check:
- DNS records (does the domain point to the correct server?).
- Whether .htaccess blocks access to the /.well-known/acme-challenge/ path.
- Whether the domain is excluded from AutoSSL in cPanel settings.

---

When to Choose a Paid SSL Instead of Let's Encrypt?

Let's Encrypt covers the vast majority of use cases, but paid certificates have their place:

Scenario	Recommendation
Blog, portfolio, brochure site	Let's Encrypt (free)
Small to medium online store	Let's Encrypt or paid DV SSL
Large e-commerce, bank, insurance	Paid OV or EV SSL
Wildcard (all subdomains)	Let's Encrypt Wildcard or paid Wildcard SSL
Certificate with financial warranty	Paid SSL only

For advanced SSL solutions — Wildcard, OV, and EV certificates — explore our SSL certificate options.

If you manage your own server and need full control over SSL configuration, a NVMe VPS lets you use Certbot and Let's Encrypt directly from the command line. For lighter workloads, an SSD VPS is a cost-effective alternative. And if you need maximum raw performance with dedicated resources, our dedicated servers are fully SSL-ready.

---

Common Problems and Quick Fixes

Error: "Too Many Certificates"
Let's Encrypt limits issuance to 50 certificates per domain per week. If the limit is reached, wait for the counter to reset.

Certificate not showing after installation
Clear your browser cache (Ctrl+Shift+Delete) or test in an incognito window.

AutoSSL fails with a CAA error
Check your DNS for a CAA record that restricts certificate issuance to specific CAs. Add letsencrypt.org to the allowed list.

Site still loads over HTTP after redirect
Check Cloudflare SSL settings — the mode should be "Full (Strict)", not "Flexible".

---

Conclusion

Installing a Let's Encrypt SSL certificate in cPanel is one of the most impactful and straightforward things you can do for your website. In under 10 minutes, you move from HTTP to HTTPS, protect your visitors' data, improve your Google rankings, and eliminate browser security warnings.

If you're looking for reliable hosting with cPanel included, free SSL out of the box, and real technical support, explore CLIQHOST's shared hosting cPanel plans. Have questions? The CLIQHOST team is ready to help you get set up.