{"id":1439,"date":"2026-05-22T17:48:30","date_gmt":"2026-05-22T17:48:30","guid":{"rendered":"https:\/\/www.jolt.co.uk\/help\/cpanel-autossl-renewals-after-experiencing-failure\/"},"modified":"2026-07-17T09:55:08","modified_gmt":"2026-07-17T09:55:08","slug":"cpanel-autossl-renewals-after-experiencing-failure","status":"publish","type":"post","link":"https:\/\/www.jolt.co.uk\/help\/cpanel-autossl-renewals-after-experiencing-failure\/","title":{"rendered":"cPanel AutoSSL Renewals After Experiencing Failure"},"content":{"rendered":"\n<p>AutoSSL runs automatically once every 24 hours on the server. During each run, it checks all domains on the account and attempts renewal if:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The existing certificate is within <strong>days of expiry<\/strong><\/li>\n\n\n\n<li>The domain resolves correctly to the hosting server<\/li>\n\n\n\n<li>The domain is publicly reachable<\/li>\n\n\n\n<li>DNS and nameservers are correctly configured<\/li>\n<\/ul>\n\n\n\n<p>If all conditions are met, AutoSSL issues a new certificate and installs it automatically. No downtime occurs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Common Reasons AutoSSL Fails<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>1<\/strong>. If the domain no longer points to the hosting server, AutoSSL cannot verify it.<\/h3>\n\n\n\n<p><strong>Symptoms:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AutoSSL log shows \u201cDCV challenge failed\u201d<\/li>\n\n\n\n<li>Certificate does not renew<\/li>\n\n\n\n<li>Domain resolves to another provider<\/li>\n<\/ul>\n\n\n\n<p><strong>Fix:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Update the DNS A record to point back to the hosting server<\/li>\n\n\n\n<li>Wait for DNS propagation (usually up to 4 hours)<\/li>\n\n\n\n<li>Run AutoSSL manually in cPanel (optional)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>2. <\/strong>AutoSSL cannot validate or renew certificates for expired domains.<\/h3>\n\n\n\n<p><strong>Fix:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Renew the domain with your registrar<\/li>\n\n\n\n<li>Wait for DNS to reactivate<\/li>\n\n\n\n<li>AutoSSL will retry automatically within 24 hours<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>3. <\/strong>Missing or incorrect A\/AAAA records will cause validation to fail.<\/h3>\n\n\n\n<p><strong>Fix:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ensure the domain and any subdomains point to the correct server IP<\/li>\n\n\n\n<li>Remove AAAA records if IPv6 is not supported<\/li>\n\n\n\n<li>Avoid CNAME loops or redirects<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>4. Existing conflicting DNSSEC record on domain<\/strong><\/h3>\n\n\n\n<p>DS record could prevent domain resolution and AutoSSL can&#8217;t validate, thus renewal may fail.<\/p>\n\n\n\n<p><strong>Fix:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Remove the DS record from the domain registrar<\/li>\n\n\n\n<li>Re-run AutoSSL<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>5. The domain is behind a proxy (Cloudflare, CDN, firewall)<\/strong><\/h3>\n\n\n\n<p>Some proxies interfere with DCV (Domain Control Validation).<\/p>\n\n\n\n<p><strong>Fix:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ensure Cloudflare \u201cProxy\u201d is disabled (set to <strong>DNS\u2011only<\/strong>) during renewal<\/li>\n\n\n\n<li>Or add the required AutoSSL validation exceptions if supported<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to Manually Trigger AutoSSL<\/strong><\/h2>\n\n\n\n<p>You can manually run AutoSSL from within cPanel:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Log in to <strong>cPanel<\/strong><\/li>\n\n\n\n<li>Go to <strong>SSL\/TLS Status<\/strong><\/li>\n\n\n\n<li>Click <strong>Run AutoSSL<\/strong><\/li>\n<\/ol>\n\n\n\n<p>This forces an immediate validation attempt and is useful after fixing DNS issues.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Cleaning Up Old or Invalid Domains<\/strong><\/h2>\n\n\n\n<p>If a domain no longer belongs to you or is no longer hosted on the server, AutoSSL will repeatedly fail for it. Thus Remove the domain from <strong>Addon Domains<\/strong>, <strong>Subdomains<\/strong>, or <strong>Aliases<\/strong> in cPanel.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>When to Contact Support<\/strong><\/h2>\n\n\n\n<p>Contact support if:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>AutoSSL continues to fail after DNS is corrected<\/li>\n\n\n\n<li>You are unsure which DNS records to use<\/li>\n\n\n\n<li>You require a paid or EV\/OV SSL certificate instead of AutoSSL<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>AutoSSL runs automatically once every 24 hours on the server. During each run, it checks all domains on the account and attempts renewal if: The existing certificate is within days of expiry The domain resolves correctly to the hosting server The domain is publicly reachable DNS and nameservers are correctly&hellip;<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1439","post","type-post","status-publish","format-standard","hentry","category-cpanel"],"_links":{"self":[{"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/posts\/1439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/comments?post=1439"}],"version-history":[{"count":0,"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/posts\/1439\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/media?parent=1439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/categories?post=1439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jolt.co.uk\/help\/wp-json\/wp\/v2\/tags?post=1439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}