Symptoms
When running the checkallsslcerts script, you receive a message similar to the following.
The system will not attempt to replace the certificate for the “ftp” service with a signed certificate from the cPanel Store because the administrator disabled this functionality
Description
It is possible to disable the function that allows cPanel to order a new hostname certificate through touch files.
Workaround
Run the following commands delete the touch files and re-enable the function that allows cPanel to order and install hostname certificates.
/bin/rm /var/cpanel/ssl/disable_auto_hostname_certificate
/bin/rm /var/cpanel/ssl/disable_service_certificate_management
Additional resources
The checkallsslcerts Script: Disable a cPanel-signed hostname certificate