SSL Certificates

SSL certificates secure a domain with HTTPS. The Domain Reseller module uses Let's Encrypt to issue free SSL certificates.

Prerequisite: Correct DNS

SSL issuance requires the domain to be pointing to your server — the correct A records must be set first. If issuance fails, verify DNS records under DNS Management and confirm propagation before retrying. Port 80 (HTTP) must also be accessible on the server for the Let's Encrypt challenge.

Issue a Certificate

1. Open Domain List → Manage → SSL.
2. Click Issue SSL Certificate.
3. The system runs Let's Encrypt issuance in the background.
4. Certificate status updates to Active when complete, and the issue and expiry dates are stored.

Renew a Certificate

Let's Encrypt certificates expire every 90 days. Click Renew SSL Certificate to renew manually, or let the system renew automatically 30 days before expiry.

Revoke a Certificate

Click Revoke SSL Certificate to invalidate the certificate immediately — for example if the private key is compromised.

Troubleshooting

• Issuance failing: the domain's A record must point to the correct server IP. Check DNS propagation with dnschecker.org.
• Renewal not reflecting: wait a few minutes for the background job, then refresh the SSL panel to confirm the new expiry date.