.png?fit=max&auto=format&n=dGkoxjFuwLusXp7Z&q=85&s=32c3cb11b5a290cd869640fca5093944)
Buying and choosing
Which SSL certificate should I buy?
Which SSL certificate should I buy?
DV for personal sites, OV for business sites, EV for finance and enterprise. Wildcard for multiple subdomains, SAN for multiple domains. See [Understanding SSL Certificates](/SSL & Website Security/understanding-ssl).
How much does an SSL certificate cost?
How much does an SSL certificate cost?
Pricing varies by type and validity period. See the SSL Certificates section in your EnrolWeb dashboard for current pricing.
Do you offer free SSL?
Do you offer free SSL?
Yes. Let’s Encrypt is available free in cPanel for shared and WordPress hosting.
What's the maximum validity period?
What's the maximum validity period?
Public SSL certificates issue for up to 1 year (industry standard since 2020). Some certificates can be paid for up to 2 years but reissue annually.
Activation and validation
How do I activate my SSL certificate?
How do I activate my SSL certificate?
Generate a CSR, submit it in your EnrolWeb dashboard, and complete domain validation. See [Activating Your SSL](/SSL & Website Security/contact-2).
How long does validation take?
How long does validation take?
DV: minutes. OV: 1-3 days. EV: 1-7 days.
What are the validation methods?
What are the validation methods?
Email (send to admin@, webmaster@), DNS (add a CNAME or TXT record), or HTTP (upload a file to your site).
I'm not receiving the validation email
I'm not receiving the validation email
Check spam, use one of the approved admin addresses, or switch to DNS validation.
Installation
How do I install my SSL certificate?
How do I install my SSL certificate?
In cPanel, use SSL/TLS Manager to paste your certificate, private key, and CA bundle. On custom servers, configure Nginx or Apache directly. See [Installing SSL](/SSL & Website Security/contact-2-2).
What's the difference between the certificate and CA bundle?
What's the difference between the certificate and CA bundle?
The certificate is your domain’s cert. The CA bundle is the intermediate chain that proves your certificate is trusted. Both are required.
How do I force HTTPS?
How do I force HTTPS?
Enable Force HTTPS Redirect in cPanel Domains, or add a redirect rule in
.htaccess or Nginx config.Renewal and reissuance
When should I renew?
When should I renew?
30-60 days before expiration. Enable auto-renewal to handle billing automatically. See [Renewing SSL](/SSL & Website Security/contact-2-2-3).
What happens if my SSL expires?
What happens if my SSL expires?
Browsers show a security warning and block visitors. Renew or install a free Let’s Encrypt certificate immediately.
Why would I need to reissue?
Why would I need to reissue?
Lost private key, compromised key, domain change, or server migration. See [Reissuing SSL](/SSL & Website Security/contact-2-2-3-2).
Troubleshooting
Browser says 'Not Secure' after installing
Browser says 'Not Secure' after installing
Check for mixed content, verify hostname matches, and confirm the CA bundle is installed. See [SSL Troubleshooting](/SSL & Website Security/contact-2-2-2).
What is a mixed content warning?
What is a mixed content warning?
Your HTTPS page loads HTTP resources. Update all resource URLs to
https://.How do I test my SSL setup?
How do I test my SSL setup?
Use ssllabs.com/ssltest for a full grade and report.