Support
cPanel Security & Optimization Hub (2026 Guides):
In 2026, running a website without an active SSL certificate (HTTPS) is no longer an option. Google Chrome, Safari, and Firefox immediately mark unencrypted websites as “Not Secure”, triggering security warnings that destroy visitor trust, tank conversion rates, and hurt your Google search rankings.
The good news? With HeroHosty, you do not need to pay $30 to $100 every year for basic domain validation SSL certificates. Every hosting plan includes Free Lifetime Let’s Encrypt SSL Certificates with automated 90-day renewals directly integrated into our authentic cPanel dashboard.
In this step-by-step 2026 tutorial, you will learn how to activate free SSL using cPanel AutoSSL, verify your certificate status, force HTTPS redirection across your entire website, and troubleshoot common SSL errors in under 2 minutes.
Why Free SSL on HeroHosty is Better than Paid Certificates
- 100% Free Lifetime Protection: Zero extra charges, zero expiration surprises.
- Automatic AutoSSL Renewal: cPanel checks and renews certificates automatically before they expire.
- Industry-Standard 256-Bit Encryption: Powered by Let’s Encrypt / Sectigo with full browser compatibility (99.9%).
- SEO Ranking Boost: Google confirms HTTPS is an official ranking signal in search algorithms.
Method 1: Automatic SSL Installation via cPanel AutoSSL (Recommended)
On HeroHosty servers, the automated cPanel AutoSSL daemon runs every few hours in the background. As soon as your domain name’s DNS nameservers point to HeroHosty, a free SSL certificate is automatically requested, validated, and installed on your domain and all subdomains.
However, if you just pointed your domain and want your SSL active immediately without waiting for the automated cron schedule, you can trigger AutoSSL manually in 4 simple clicks:
Step-by-Step Instructions:
- Log in to your cPanel account (via
yourdomain.com:2083or directly from your HeroHosty Client Area). - Scroll down to the Security section and click on SSL/TLS Status.
- On the SSL/TLS Status screen, you will see a list of all your domains, subdomains, and mail endpoints alongside lock icons:
- Green Lock: SSL certificate is already installed and valid.
- Red Lock: Domain does not yet have an active certificate.
- Select the checkbox next to the domain(s) you wish to secure, then click the blue “Run AutoSSL” button at the top of the page.
- Allow 60 to 120 seconds for the validation check to complete. Once finished, the page will refresh, displaying green locks across your domain and subdomains!
Method 2: Installing SSL Manually via cPanel SSL/TLS Manager
If you purchased a dedicated third-party SSL certificate (such as an Extended Validation EV SSL or Wildcard certificate from Comodo, DigiCert, or Sectigo), you can install it manually through the SSL/TLS Manager:
- In cPanel, navigate to Security → SSL/TLS.
- Under Install and Manage SSL for your site (HTTPS), click Manage SSL Sites.
- From the Domain dropdown menu, select your website domain.
- Paste your certificate details into the three respective fields:
- Certificate: (CRT) — Provided by your SSL vendor.
- Private Key: (KEY) — Generated during your CSR creation.
- Certificate Authority Bundle: (CABUNDLE) — Intermediate certificates.
- Click Install Certificate. A confirmation popup will confirm your SSL certificate has been successfully bound to your domain IP address.
How to Force HTTPS Across Your Website (Automatic Redirect)
Installing an SSL certificate enables HTTPS access, but visitors typing http://yourdomain.com may still land on the unencrypted HTTP version. To ensure 100% of your visitors are automatically redirected to the secure HTTPS protocol, use either of the following methods:
Option A: 1-Click cPanel Domain Force HTTPS (Easiest)
Inside cPanel, go to Domains → Domains. Find your domain name and simply toggle the “Force HTTPS Redirect” switch to ON. cPanel handles the redirection rule automatically at the server level.
Option B: Force HTTPS via .htaccess File
If you prefer configuring server rules manually or run a custom application, add the following standard rewrite rule to the top of your public_html/.htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]Troubleshooting Common SSL Certificate Errors
1. DNS Not Propagated (AutoSSL Fails)
AutoSSL requires your domain’s DNS to point to your HeroHosty server IP. If you recently updated nameservers, wait 1 to 4 hours for DNS propagation before running AutoSSL. See our HeroHosty Nameserver Guide.
2. Mixed Content Warning in Browser
If your padlock shows a yellow exclamation mark, some images or scripts on your page are loading via http:// instead of https://. On WordPress, install the Really Simple SSL plugin or update URLs via Better Search Replace to fix all links in 1 click.
3. Cloudflare SSL Handshake Failed (Error 525/526)
If using Cloudflare proxy (orange cloud), ensure your Cloudflare SSL/TLS encryption mode is set to “Full” or “Full (strict)” once HeroHosty’s origin certificate is active.
Recommended Web Hosting Plans with Free Lifetime SSL
Single Shared Hosting
Ideal for personal blogs, starter sites, and portfolios.
✓ 10 GB Enterprise NVMe
✓ Unmetered Bandwidth
✓ Free SSL & cPanel
Business Shared Hosting
Designed for growing businesses, WordPress, & e-commerce.
✓ Unlimited NVMe SSD
✓ 2 CPU Cores & 4 GB RAM
✓ LiteSpeed Turbo Caching
Premium Shared Hosting
Max performance for web agencies and high-traffic portals.
✓ Unlimited NVMe SSD
✓ 3 CPU Cores & 6 GB RAM
✓ VIP 24/7 Support & Backups
Frequently Asked Questions (FAQ) : cPanel SSL Certificates
1. Is the SSL certificate on HeroHosty truly 100% free forever?
Yes. Every hosting account on HeroHosty includes free automated Let’s Encrypt / Sectigo SSL certificates for your main domain, addon domains, subdomains, and mail servers with zero renewal fees.
2. How long does it take for AutoSSL to issue a certificate?
Once your domain is pointing to HeroHosty’s nameservers, running AutoSSL typically issues and installs the SSL certificate in 60 to 180 seconds.
3. Do I need to manually renew my SSL certificate every 90 days?
No. cPanel AutoSSL automatically runs background checks every 24 hours. When your certificate is within 30 days of expiry, cPanel automatically re-issues and renews it without any manual intervention or website downtime.
4. Can I install an SSL certificate on a subdomain?
Yes. cPanel AutoSSL automatically covers all subdomains (such as blog.yourdomain.com or shop.yourdomain.com). See our cPanel Subdomain Guide for complete instructions.
