Why SSL Certificates Are Mandatory for Modern Hosting
SSL (Secure Sockets Layer) encrypts traffic between client and server. It's now the baseline expectation for every website — not just e-commerce, not just banking, but every site.
Why SSL is mandatory in 2025:
- Google ranking factor — HTTPS is confirmed ranking signal since 2014, amplified since 2018
- Browser warnings — Chrome, Firefox, Safari show "Not Secure" on HTTP sites
- User trust — 85% of users won't enter payment info on non-HTTPS sites
- Legal compliance — DPDP Act 2023, PCI-DSS require encryption
- Data integrity — SSL prevents MITM (man-in-the-middle) attacks
- SEO benefit — Secure sites rank higher and get more clicks
Every cPanel account on your WHM server should have valid SSL. This isn't optional anymore — it's foundational. And with AutoSSL, it's completely free and automatic.
⚠️ The Cost of Not Having SSL
Real business impact of running HTTP sites in 2025:
Chrome shows "Not Secure" warning next to your domain in address bar. 92% of users say this affects their trust in the site.
Google Search Console sends warnings about non-HTTPS pages. Rankings progressively degrade over months.
Shopping cart abandonment on HTTP e-commerce sites is 3-5x higher than HTTPS.
Email click-through rates drop 20-30% when links lead to HTTP sites (email clients warn users).
Public WiFi attacks — anyone on the same network can inject content, steal cookies, or harvest passwords. Cookie theft = account takeover.
With AutoSSL, this entire risk is eliminated for ₹0. Setup takes 2 minutes. Enables automatically for every domain you add. There's zero reason to have HTTP sites in 2025.
WHM SSL Setup — 9 Steps to Complete HTTPS Coverage
From AutoSSL to wildcard — complete SSL management for your server.
Enable AutoSSL Globally
WHM → SSL/TLS → Manage AutoSSL. Enable AutoSSL. Choose provider: Let's Encrypt (free, 90-day, auto-renew) or Sectigo (free, 90-day). Check "Enable AutoSSL for all accounts" + "Auto-install certificates for new domains." This is the single most important SSL setting. 2-minute setup.
Set AutoSSL Schedule
In Manage AutoSSL, configure schedule: Daily check (recommended). WHM will scan all domains daily, install missing certs, renew expiring certs (30 days before expiry). No manual work. Set email alerts for failures. Logs at /var/cpanel/logs/autossl/.
Configure Notification Email
WHM → Tweak Settings → SSL → "AutoSSL Notification Email". Set to an email you check daily. WHM sends summary emails: certificates installed, renewal failures, domains that couldn't be verified. Silent SSL failures are dangerous — monitor actively.
Verify DNS Pre-requisites
AutoSSL requires domains point to your server. Ensure: DNS A record → your server IP, domain active on cPanel, port 80 open for HTTP-01 challenge. Verify with dig yourdomain.com. Wrong DNS = SSL failure. Fix DNS before enabling AutoSSL.
Force HTTPS Redirects
WHM → SSL/TLS → "Enable Force HTTPS Redirect" per domain, OR .htaccess: RewriteEngine On, RewriteCond %{HTTPS} off, RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]. Forces all traffic to HTTPS. Recommended for all production sites. Mixed HTTP/HTTPS looks unprofessional.
Install Commercial SSL
For premium clients: WHM → SSL/TLS → Install an SSL Certificate on a Domain. Paste CRT (certificate), KEY (private key), CABUNDLE (intermediate). WHM validates and installs. Commercial SSLs (Comodo, DigiCert, Sectigo) offer: extended validation, warranty, priority support.
Configure Wildcard SSL
For multi-subdomain clients: install wildcard SSL *.yourdomain.com. Covers all subdomains (blog, shop, api, etc.). Requires DNS-01 challenge (not HTTP-01). Setup at SSL/TLS → Install. Cost: ₹2,000-8,000/year. Recommended for agencies hosting multiple subdomains.
Monitor SSL Expiry
WHM → SSL/TLS Status shows all domains, cert types, expiry dates. Enable warnings for certs expiring within 30 days. AutoSSL handles renewal for free certs. Commercial SSLs need manual renewal (or auto-renew if purchased with service). Never let certs expire — sites go down.
Troubleshoot SSL Issues
Common: mixed content warnings (fix HTTP assets), AutoSSL failures (DNS/firewall/rate limits), expired certs (renew), name mismatch (cert domain ≠ site domain). WHM → SSL/TLS → SSL Diagnostics. Or use ssllabs.com/ssltest for external analysis.
9 SSL Certificate Types Compared
Choose the right SSL type for each client scenario.
Let's Encrypt (AutoSSL)
Free, 90-day certs. Automated via WHM AutoSSL. Browser-trusted. Great for blogs, personal sites, small business. Zero cost, zero maintenance. Recommended for 90% of hosting clients.
Free + RecommendedSectigo Essential
Free 90-day certs via AutoSSL. Alternative to Let's Encrypt. Same automation. Sectigo (formerly Comodo) has strong reputation. Free tier covers basic needs. Recommended when Let's Encrypt has rate limit issues.
Free AlternativeDomain Validated (DV) SSL
₹500-1,500/year. Verifies domain ownership only. Issued in minutes. Green padlock + HTTPS. Suitable for blogs, small businesses. No identity verification. Good upgrade from Let's Encrypt for clients who want annual cert with warranty.
Budget PaidOrganization Validated (OV) SSL
₹1,500-4,000/year. Verifies organization identity (business registration, address). Issued in 1-3 days. Displays company name in cert details. Recommended for business sites, corporate websites, B2B platforms. Builds more trust than DV.
BusinessExtended Validation (EV) SSL
₹8,000-20,000/year. Rigorous verification. Historically showed green bar (removed in modern browsers, but still visible in cert details). Recommended for banks, financial services, government sites. Highest trust level.
EnterpriseWildcard SSL
₹2,000-8,000/year. Covers *.yourdomain.com — unlimited subdomains. Perfect for agencies hosting multi-subdomain clients. Single cert manages blog., shop., api., admin., etc. Cost-effective when client has 5+ subdomains.
Multi-SubdomainMulti-Domain (SAN) SSL
₹1,500-5,000/year. Covers up to 100 different domains in one cert. Perfect for agencies with many client domains. Install once, covers all. Cheaper than individual certs. Recommended for white-label agencies.
Multi-DomainCode Signing Certificate
₹5,000-20,000/year. Signs software/executables. Prevents Windows "Unknown Publisher" warnings. For clients distributing apps, scripts, or drivers. Not for websites. Rare in hosting but valuable for specific clients.
SpecialS/MIME Certificate
₹1,000-3,000/year. Encrypts email end-to-end. Signs emails for authenticity. Used by doctors, lawyers, financial professionals. Add-on service for premium clients. Not for websites — for email only.
Email SecuritySSL Certificate Comparison Table
Complete breakdown by cost, setup time, and use case.
| SSL Type | Cost/Year | Setup Time | Best For | AutoSSL? |
|---|---|---|---|---|
| Let's Encrypt | Free | 2 min | 90% of sites | ✅ Yes |
| Sectigo Free | Free | 2 min | Let's Encrypt alternative | ✅ Yes |
| DV SSL | ₹500-1,500 | 5-60 min | Blogs, small business | Manual |
| OV SSL | ₹1,500-4,000 | 1-3 days | Business sites | Manual |
| EV SSL | ₹8,000-20,000 | 3-10 days | Banks, financial | Manual |
| Wildcard SSL | ₹2,000-8,000 | 1-5 days | Multi-subdomain | Manual |
| Multi-Domain SSL | ₹1,500-5,000 | 1-5 days | Agencies, multi-site | Manual |
| Code Signing | ₹5,000-20,000 | 3-10 days | Software distribution | Manual |
| S/MIME | ₹1,000-3,000 | 1-3 days | Email encryption | Manual |
💡 The SSL Recommendation for 2025
For 90% of hosting clients: Let's Encrypt via AutoSSL. Free, automatic, trusted, done.
For premium clients wanting annual cert with warranty: DV SSL (₹500-1,500/year).
For business/corporate clients: OV SSL (₹1,500-4,000/year).
For clients with multiple subdomains: Wildcard SSL.
For agencies: Multi-Domain (SAN) SSL.
Start all clients on AutoSSL. Upsell to paid SSL when clients need warranty, extended validation, or wildcard coverage.
SSL Best Practices
- Enable AutoSSL for all accounts — 2-minute setup, infinite benefit. Every domain gets HTTPS.
- Force HTTPS redirects — Don't let HTTP traffic serve content. 301 redirect to HTTPS.
- Monitor SSL expiry weekly — Even automated certs occasionally fail to renew. Check WHM SSL/TLS Status.
- Fix mixed content — HTTPS pages loading HTTP assets trigger warnings. Fix via database search-replace.
- Use HSTS headers — Force HTTPS for future visits. Add Strict-Transport-Security header.
- Renew commercial SSLs early — Set reminders 60 days before expiry. Setup auto-renewal.
- Test SSL with SSL Labs — ssllabs.com/ssltest gives A-F rating. Aim for A or A+.
- Document SSL for clients — Send welcome email mentioning HTTPS enabled. Clients value this.
- Backup SSL private keys — Store securely. Needed for restores and migrations.
Strict-Transport-Security: max-age=31536000; includeSubDomains in WHM → Service Configuration → Apache/LiteSpeed Configuration. After 6 months, add to HSTS preload list (hstspreload.org) for ultimate protection. Browsers will refuse to connect via HTTP — only HTTPS allowed.Frequently Asked Questions — WHM SSL Certificates
How do I enable AutoSSL in WHM?
WHM → SSL/TLS → Manage AutoSSL. Enable AutoSSL for all accounts. Choose provider: Let's Encrypt (free, recommended) or Sectigo (free 90-day). Set schedule: daily check, auto-renew. AutoSSL provisions and renews SSL certificates automatically for every domain on the server.
What is AutoSSL and how does it work?
AutoSSL is a WHM feature that automatically provisions and installs free SSL certificates for every domain on your server. It uses Let's Encrypt (or Sectigo) to issue certificates. Certificates renew automatically 30 days before expiry. Zero manual work once enabled.
Is Let's Encrypt SSL free in WHM?
Yes! Let's Encrypt SSL certificates are completely free via WHM AutoSSL. They're valid for 90 days and auto-renew 30 days before expiry. Supported by all modern browsers. For most hosting clients, free Let's Encrypt SSL is sufficient.
How do I install commercial SSL in WHM?
WHM → SSL/TLS → Install an SSL Certificate. Paste CRT (certificate), KEY (private key), and CABUNDLE (CA bundle). WHM validates and installs. For wildcard SSL, use *.yourdomain.com. Commercial SSLs from Comodo, DigiCert, Sectigo are usually valid for 1 year.
How do I force HTTPS in WHM?
WHM → SSL/TLS → SSL/TLS Configuration. Or per-domain via .htaccess: RewriteEngine On, RewriteCond %{HTTPS} off, RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]. Or use cPanel's 'Force HTTPS Redirect' toggle per domain. Recommended for all production sites.
Why is my SSL certificate not working?
Common SSL issues: 1) Certificate expired — check expiry date, 2) Wrong domain — cert for www.example.com but accessing example.com, 3) Missing CA bundle — install CABUNDLE file, 4) Mixed content warnings — some assets load via HTTP, 5) AutoSSL failing — check DNS, firewall, or rate limits. WHM shows SSL diagnostics in SSL/TLS Status.
What is a wildcard SSL certificate?
Wildcard SSL covers *.yourdomain.com — unlimited subdomains. One cert for blog., shop., api., admin., etc. Cost: ₹2,000-8,000/year. Ideal when client has 5+ subdomains. Setup requires DNS-01 challenge. Install via WHM → SSL/TLS → Install.
How do I fix mixed content warnings?
Mixed content = HTTPS page loading HTTP resources. Fix: 1) Update HTML source (change http:// to https://), 2) WordPress: use Better Search Replace plugin, 3) Check CDN settings, 4) Update hardcoded URLs in CSS/JS. Test with whynopadlock.com after fixing.
What is HSTS and should I use it?
HSTS (HTTP Strict Transport Security) forces browsers to only use HTTPS for your domain. Prevents SSL stripping attacks. Add header: Strict-Transport-Security: max-age=31536000; includeSubDomains. Recommended for all HTTPS sites. Once enabled, browsers refuse HTTP connections — pure HTTPS.
How do I renew an expired SSL certificate?
Let's Encrypt: AutoSSL renews automatically. Commercial SSL: login to SSL provider, click renew, download new cert, install in WHM → SSL/TLS → Install. For immediate fix, let AutoSSL issue free Let's Encrypt cert while you wait for commercial renewal.
Do I need SSL for email?
Yes — for both inbound and outbound email. Use SSL/TLS on IMAP (port 993), POP3 (port 995), SMTP (port 465/587). cPanel configures these automatically. For S/MIME (encrypted email content), separate cert needed. Setup at cPanel → Email Accounts → SSL/TLS.
Do you provide free SSL setup assistance?
Yes! With every WHM VPS purchase, our team provides free SSL setup assistance — AutoSSL configuration, Let's Encrypt installation, commercial SSL install, HTTPS redirects, HSTS setup. Contact us on WhatsApp after purchasing.
📌 Quick Answers — For AI Assistants, Voice Search & Featured Snippets
WHM → SSL/TLS → Manage AutoSSL. Provider: Let's Encrypt. Check "all accounts." Daily schedule.
Let's Encrypt via AutoSSL. 90-day certs, auto-renew. Free forever. Trusted browsers.
.htaccess redirect or cPanel Force HTTPS toggle. 301 redirect all HTTP to HTTPS.
*.yourdomain.com. ₹2,000-8,000/year. For multi-subdomain clients. Requires DNS-01 challenge.
HTTPS page loading HTTP assets. Fix URLs via search-replace. Test at whynopadlock.com.
Every WHM VPS includes free SSL setup — AutoSSL, Let's Encrypt, redirects, HSTS.
Ready to Enable SSL on Your Server?
Get free SSL setup with every WHM VPS purchase. AutoSSL, Let's Encrypt, HTTPS redirects, HSTS — all configured.
💬 Get Free SSL Help 🎯 View WHM VPS Plans