SSL certificates and fixing “Not secure” warnings

An SSL certificate encrypts the connection between your visitors and your website, shown by https:// and a padlock. It also makes sure visitors are really talking to your site. Our web hosting plans include a free SSL certificate.

How your free SSL works

cPanel issues and renews the certificate automatically (AutoSSL) once your domain points to your hosting. You do not need to buy or install anything.

Check or renew your certificate

1. In cPanel click SSL/TLS Status.
2. Look for your domain. A padlock means it has a valid certificate.
3. If it is missing, select the domain and click Run AutoSSL. Allow a few minutes.

Fixing common problems

• “Your connection is not private” on a new domain: your domain probably does not point to your hosting yet, so the certificate cannot be issued. See How to point your domain, wait, and run AutoSSL.
• Padlock with a warning, or “not fully secure”: your page still loads some images or scripts over http:// (mixed content). Change those links to https://.
• Make your site always use https: add this to the .htaccess file in public_html, above the existing content:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]