AutoSSL certificates are not installed automatically on new domains

Symptoms

After adding a new domain to a cPanel account, an AutoSSL certificate is not automatically installed on it.

Cause

With the release of cPanel v134.0.3, a unified SSL interface was introduced, combining the SSL/TLS, SSL/TLS Status, and SSL/TLS Wizard interfaces. As part of this update, new domains no longer have a free Let's Encrypt certificate generated for them automatically. Instead, when setting up SSL for a new domain, cPanel now explicitly prompts the user to review and accept the Let's Encrypt Terms of Service before a certificate can be issued, ensuring users are aware of and consent to the terms before a certificate is generated on their behalf.

Resolution

Free Let's Encrypt certificates remain available and can be requested via the Wizard tab of the new SSL/TLS Certificates page. Please follow the steps below to restore automatic SSL certificate creation for new domains:

1. Locate (or create, if it doesn't exist) the /var/cpanel/panel.ini file.
2. Open the file in a text editor.
3. Add the following lines to the file and save:

CONFIG_TEXT: [global]
autossl.exclude_new_domains = false

This restores automatic SSL certificate creation for new domains, effectively accepting the Let's Encrypt Terms of Service on behalf of your users.

Note: By configuring this option, you as the hosting provider take responsibility for ensuring that your users are informed of and in agreement with the Let's Encrypt Terms of Service.

SSL/TLS Certificates 

SSL/TLS Status page does not show