ISPA Winner 2018 16 Years of Krystal

Web Hosting

Please find below our list of Web Hosting guides to help with your hosting account.

How to install a free Lets Encrypt SSL Certificate

This article was posted in: Web Hosting

Lets Encrypt is a service offered free of charge to enhance the security of the internet for all - it is provided by the Internet Security Research Group (ISRG). This article assumes you have successfully logged into your cPanel account.

IMPORTANT NOTE: If you decide to install a commercial SSL certificate from Krystal, or a third party, then you MUST FIRST delete any Let's Encrypt certificates from the domain, otherwise the Let's Encrypt system will continue to refresh their certificate every 90 days, overwriting any other.

Step 1 - open Lets Encrypt

Locate and click on the Lets Encrypt SSL icon - you will find this under the Security section.

Step 2 - Select Domain

Locat the domain name for which you wish to issue a certificate. Click the Issue link as shown.

Step 3 - Choose additional domains to include in certificate

In addition to the primary certificate domain (1) you can add additional domains (2) to the certificate. For addon domains this can look a bit messy as it will also provide options for the shadow subdomain that cPanel uses internally to track bandwidth data. However the only important one you want to include is (shown above as

Also, be sure to tick the Install mail SMTPS/POP3S/IMAPS SSL certificate... box if you wish to use your own domain name to connect to the incoming and outgoing mail service. Similarly, if you've got mail pointing externally (for example, to Office 365 or G Suite) you'll normally need to leave this unticked or the certificate will fail to issue.

Step 4 - That's it

In a few moments you should see a success message similar to the one shown.

You can now see the installed certificate. The system will normally automatically renew this every 90 days in the background.