Knowledgebase

SSL/TLS (Secure Sockets Layer) (Transport Layer Security) is the standard technology for establishing an encrypted link between a web server and a browser. This link ensures all data passed between the web server and browsers remain private and integral. SSL/TLS is essential for protecting your website, even if it doesn’t handle sensitive information like credit cards. It provides privacy, critical security and data integrity for both the website and users’ personal information.

An SSL/TLS connection requires a certificate. This article covers various methods by which an SSL/TLS certificate can be issued.

AutoSSL in cPanel

There are no forms to fill out, and no certificates to manually copy into place. Once AutoSSL is enabled, websites are automatically secured with a free, Domain Validated SSL/TLS certificate. The coverage will never lapse; at the time of expiration a new, free, SSL/TLS is requested and automatically installed.

In order for cPanel to validate an AutoSSL certificate, the following must be true:

• The domain name must resolve to the cPanel server. If the domain name resolves to a CDN or WAF, this is also acceptable as long as the CDN or WAF passes traffic back to the cPanel server.
• Each domain name in cPanel will have a folder called “.well-known” in the domain name’s document root. If any custom .htaccess rules exist, make sure this folder is still accessible to the public.

The AutoSSL status of any domain name in cPanel can be viewed through the SSL/TLS section.

 

Manually Issue an SSL/TLS certificate with Springs Hosting

Servers not running cPanel will need to manually issue an SSL/TLS certificate. SSL/TLS certificate pricing can be found on our website. 

The first step in doing this is to create a Certificate Signing Request (CSR). Please refer to the appropriate document listed below for instructions on how to generate a CSR:

• OpenSSL (Use for Apache & NGINX)
• Exchange 2010
• IIS 7/8
• IIS 5/6
• Java Keytool (Tomcat & other Java-based servers)

After the CSR has been generated, rename the CSR file to use a ".txt" file extension. A key file may also be generated. Please do not send the key file anywhere, as it contains sensitive information. In an ideal situation, the key file should never leave the server. 

Then, open a ticket requesting an SSL/TLS certificate. Attach the CSR file to the ticket. Please include the following information in the ticket: 

• The desired validity period (1 year or 2 years)
• The type of validation (if you don't know, you probably want a domain validated (DV) certificate)
• The domain name(s) the SSL certificate will cover

We will respond with the SSL/TLS certificate as soon as we are able to issue it.