Will AutoSSL cover service subdomains when domain.tld uses a non-AutoSSL certificate?

Question

Will AutoSSL cover mail.domain.tld, or other service subdomains when domain.tld uses a non-AutoSSL certificate?

Answer

Because subdomains such as mail.domain.tld are added as an alias in a domains VirtualHost configuration, AutoSSL will not cover the mail.domain.tld subdomain if the primary domain uses a non-AutoSSL certificate. 

CPANEL_WARN: You can add the subdomain under Domains, however, you will need to access the service subdomain using the service port, such as webmail.example.com:2096 for webmail.

1. For example, to cover mail.domain.com using AutoSSL, we can add a new virtual host entry for mail.domain.com by adding it as a subdomain.
2. Access your cPanel account for the domain you want to use add.
3. Navigate to Domains
4. In the top right, select Create a New Domain.
    
5. Add mail.domain.tld, replacing domain with your actual domain name.

6. 

7. Click Submit
8. Repeat this for any other subdomains you want covered.
9. Navigate back to the main cPanel interface by selecting cPanel in the top left.
10. Navigate to SSL/TLS Certificates
11. Select the domains you want to include. 
12. Select Continue
13. Select Let's Encrypt Certificate

14. If you receive a pop-up, select the tick box for the acknowledgement. 

    CPANEL_WARN: I acknowledge that certificates are managed by the Let’s Encrypt Terms of Service.