How to Install Let's Encrypt SSL on Hosting

How to Install Let’s Encrypt SSL on Hosting

Let’s Encrypt provides free SSL/TLS certificates that encrypt the connection between your visitors and your website. Most cPanel hosting accounts support automatic Let’s Encrypt SSL installation.

Method 1: AutoSSL in cPanel (Easiest)

Many hosting providers, including 10Corp, have AutoSSL enabled by default. It automatically installs and renews free SSL certificates for all domains on your account.

To check or trigger AutoSSL:

1. Log into cPanel.
2. Go to Security > SSL/TLS Status.
3. You’ll see a list of all domains and subdomains with their SSL status.
4. If any domain shows as “not secure,” select it and click Run AutoSSL.
5. AutoSSL will attempt to issue and install a certificate within a few minutes.

Method 2: Let’s Encrypt Plugin in cPanel

Some cPanel installations include a dedicated Let’s Encrypt tool:

1. In cPanel, look for Security > Let’s Encrypt SSL (or Let’s Encrypt for cPanel).
2. Click Issue next to the domain you want to secure.
3. Select whether to include the www and non-www versions.
4. Click Issue to generate and install the certificate.

Method 3: SSL/TLS Manager (Manual)

If you have a certificate file from Let’s Encrypt (e.g., generated via Certbot):

1. Go to Security > SSL/TLS in cPanel.
2. Click Manage SSL sites under “Install and Manage SSL for your site.”
3. Select the domain from the dropdown.
4. Paste the Certificate (CRT), Private Key, and Certificate Authority Bundle (CABUNDLE).
5. Click Install Certificate.

Forcing HTTPS After Installation

Once SSL is installed, force all traffic to use HTTPS. Add this to your .htaccess file in public_html:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

For WordPress, also update:

1. Go to Settings > General in WordPress admin.
2. Change both WordPress Address (URL) and Site Address (URL) from http:// to https://.

SSL Renewal

Let’s Encrypt certificates are valid for 90 days. With AutoSSL or the Let’s Encrypt plugin, renewal is automatic. If using manual installation, you’ll need to renew and reinstall before expiration.

Verifying SSL Installation

After installation, verify your certificate:

• Visit your website with https:// and check for the padlock icon in the browser.
• Use online tools like SSL Labs (ssllabs.com/ssltest) to run a detailed SSL test.
• Check for mixed content warnings by opening browser developer tools (F12 > Console).

Troubleshooting

• AutoSSL fails: Ensure your domain’s DNS points to your hosting server. AutoSSL requires the domain to resolve to the server.
• Mixed content warnings: Some resources (images, scripts, stylesheets) are still loaded via HTTP. Update all URLs to HTTPS or use protocol-relative URLs.
• ERR_TOO_MANY_REDIRECTS: Check for conflicting redirect rules in .htaccess or your CMS settings.
• Certificate not trusted: Ensure the CA Bundle (intermediate certificate) is installed along with the main certificate.

Prerequisites

For Let’s Encrypt to work, the following must be true:

• Your domain must point to your hosting server (A record or nameservers)
• Port 80 and 443 must be accessible
• The domain must be publicly resolvable (not behind a private DNS)

For SSL installation assistance, contact 10Corp support.