How do I enable a free SSL certificate? Print

  • 0

In short: Shared and reseller hosting includes free Let’s Encrypt certificates. AutoSSL will normally request a certificate after the domain points to the hosting server; you can also request one from SiteWorx.

Before requesting a certificate

  • The domain must be added to the correct SiteWorx account.
  • Its DNS records must resolve to the hosting server.
  • Include both the bare domain and www name if both should be secured.
  • Allow DNS changes time to propagate before retrying.

Request a certificate in SiteWorx

  1. Sign in to SiteWorx.
  2. Go to Hosting Features > Domains > Manage.
  3. Select the shield icon beside the domain.
  4. Select Generate All With Let’s Encrypt.
  5. Choose the primary and additional domain names.
  6. Use Staging first when diagnosing a problem. If that succeeds, repeat using Live to obtain a trusted certificate.
Avoid repeated failed attempts: Let’s Encrypt applies rate limits. Correct DNS and validation problems before repeatedly requesting a live certificate.

Check that it worked

Open every hostname included in the certificate using https://. Confirm that the browser reports a valid certificate and that images, scripts and stylesheets also load over HTTPS. A valid certificate does not automatically correct mixed-content links inside a website.

If issuance fails

  • Confirm the A and AAAA records point to this hosting service.
  • Check that the hostname is present in SiteWorx.
  • Review the Let’s Encrypt log under Administration > Logs.
  • If a proxy or CDN is involved, confirm it is not preventing validation.

If the option is missing or the failure is unclear, open a support ticket with the domain and the complete validation error.

Further reading: InterWorx: Manage SSL certificates in SiteWorx.

Warning emails may refer to a different certificate

A vendor warning may concern a website TLS certificate, an app-signing certificate, an API credential or a developer account. These are not interchangeable. Use I received a technical, security or renewal warning email — what should I do? to identify the affected asset before acting.


Was this answer helpful?

« Back