Introduction
Since cPanel version 56, cPanel has been providing free SSLs for your server's hostname. These are installed through a completely automated process that runs as part of the nightly update checks performed on the system. As long as your hostname resolves in DNS and is pointed to the main shared IP of the system, your machine can receive these free SSL certificates. This system is similar, but not identical, to the AutoSSL system that issues free certificates for the domains associated with cPanel accounts on the server.
Procedure
However, there may be times when you want to install a new certificate manually, such as after changing the DNS after a server migration, or if you recently changed the hostname of the machine.
Instead of waiting for the nightly cPanel update to run, you can execute the following command on the system to force a check of the hostname SSL:
/usr/local/cpanel/bin/checkallsslcerts
If the SSL needs to be replaced, the command will install the certificate for you, usually within a few minutes. If there are problems with the new SSL install, it will provide you with helpful output to troubleshoot the issue.
You can find more details about the checkallsslcerts command in our documentation here: The checkallsslcerts Script