Skip to main content

SSL for domain but NOT for service subdomains?

electric
Hello, We have a customer who wants to install their own certificate on "(www.)domain.com"... but they do NOT want the certificate to include the mail/webmail/cpanel/webdisk and other service subdomains. How can we do that? After installation of the certificate, when we go into the AutoSSL page in cpanel, it shows this for all the service subdomains: -------------- The installed certificate does not cover this domain. The certificate will not renew via AutoSSL because it was not issued via AutoSSL. --------------- There is no option in the drop-down selection box to select ONLY the domain and "www" subdomain when installing the certificate. Any ideas?

Comments

7 comments

Date Votes
  • cPanelMichael
    Hello, Service subdomains can be excluded from AutoSSL via the SSL/TLS Status option in cPanel: SSL TLS Status - Version 76 Documentation - cPanel Documentation Thanks!
    0
  • electric
    Hello, Service subdomains can be excluded from AutoSSL via the SSL/TLS Status option in cPanel:
    However, all the other hostnames have: [QUOTE]The installed certificate does not cover this domain. The certificate will not renew via AutoSSL because it was not issued via AutoSSL.

    On the far left column there is no checkbox for any of the hostnames. So it's impossible to enabled/disable AutoSSL for any of them. Any ideas?
    0
  • electric
    To make it more clear, here is a screenshot of what I am seeing. Notice there are no checkboxes on the left column. (Which means the "include/exclude" function can't be used... since those blue buttons are not activated since I can't select any hostnames to include/exclude.) imgur.com/a/jU0D9tZ
    0
  • electric
    I also tried removing the customer's ssl certificate from two (www.)domain.com hostnames. Then I enabled autossl for all domains, and that worked as expected. So then I tried installing the customer's ssl certificate again.. but once again... it is impossible to ONLY choose the two (www.)domain.com hostnames. The cpanel cert installer automatically installs the customer's ssl certificate only EVERY hostname in their entire cpanel account.. which removes the autossl certs previously installed. Any idea how we can make this work?
    0
  • cPanelMichael
    Hi @electric, Can you open a
    0
  • electric
    Can you open a
    0
  • electric
    For anyone who is having the same problem, and wondering if it's possible to have your own SSL certificate AND the cpanel AutoSSL certificate... You can't. Here is the official response from cpanel support: [QUOTE]Unfortunately, you will not be able to use the paid SSL to cover your domain and www. sub domain while using the AutoSSL to cover the rest of the sub domains. You can either use the Paid SSL to cover the domain and subdomains, or use AutoSSL (and discard the paid SSL) to cover all the domains within your cPanel. You can only pick one or the other. It is not a bug, it is how Apache works by design. There is only one vhost for each domain, therefore it can only use a single SSL for each vhost. In essence, if clients wants all cPanel service domains to work with SSL, then the clients will need to either use AutoSSL or purchase a wild card certificate.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post