SSL/HTTPS & AutoSSL Troubleshooting

Every domain on Hoststack shared and reseller hosting is secured automatically by AutoSSL, a free Let's Encrypt-based certificate that installs and renews itself with no action needed. Occasionally it can't issue a certificate, or your browser still shows "not secure" after it has — here's how to fix the common causes.

AutoSSL isn't issuing a certificate

• Your domain must point to Hoststack's nameservers or IP — AutoSSL can't verify a domain that still resolves elsewhere
• Check cPanel's SSL/TLS Status page — it shows the exact reason the last AutoSSL run failed for that domain
• A CAA DNS record that doesn't permit Let's Encrypt will block issuance — remove it or add an entry allowing letsencrypt.org
• From SSL/TLS Status, tick the domain and click Run AutoSSL to retry manually

Browser still shows "Not Secure"

If the padlock is missing even though a certificate is installed, the site is usually still loading some resources — images, scripts, or stylesheets — over plain http://. This is called mixed content, and browsers block or warn about it even on an otherwise-secure page. Use your browser's developer console (Network or Security tab) to spot which specific asset is loading over HTTP, then update that URL in your theme, plugin settings, or database.

Forcing HTTPS site-wide

• In cPanel, open Domains and toggle "Force HTTPS Redirect" for the domain — the simplest option for most sites
• Alternatively, add a redirect rule to your .htaccess file that sends all http:// requests to https://
• For WordPress, also update the Site Address and WordPress Address under Settings > General to use https://

Certificate expired or renewal failed

AutoSSL renews certificates automatically roughly every 90 days, well before expiry — a genuinely expired certificate almost always means renewal failed silently, often for the same reasons as initial issuance (DNS not pointing here, or a CAA record blocking Let's Encrypt). Check SSL/TLS Status for the failure reason, fix the underlying cause, and re-run AutoSSL. Use our SSL Checker tool to confirm the live certificate details from outside your browser's cache.