The Let's Encrypt Plugin for Free SSL

Overview:
The Let’s Encrypt plugin allows cPanel’s AutoSSL feature to issue free SSL certificates from the Let’s Encrypt™ provider. This is an alternative to the default cPanel SSL provider (Sectigo). Let’s Encrypt can issue certificates faster and supports wildcard subdomains, though it imposes rate and size limits.

Key Features:

• Supports free SSL certificates for cPanel accounts.

• Secures wildcard subdomains (*.example.com).

• Faster issuance compared to default cPanel SSL provider.

• Does not generate SSL for system hostnames.

• Requires local DNS hosting for wildcard certificates.

Installation:

1. Log in as the root user on the server.

2. Run the command:

    

   /usr/local/cpanel/scripts/install_lets_encrypt_autossl_provider

3. Log in to WHM → Home → SSL/TLS → Manage AutoSSL.

4. In the Providers tab, select Let’s Encrypt™.

5. Review and agree to the Terms of Service, then click Save.

Updating Registration:

• In Manage AutoSSL, select Recreate my current registration with “Let’s Encrypt™” after accepting the terms.

• This replaces your existing registration with a new Let’s Encrypt provider registration.

Uninstallation:

1. Log in as the root user.

2. Run the command:

    

   /usr/local/cpanel/scripts/uninstall_lets_encrypt_autossl_provider

FAQ

Q1: Can I secure non-wildcard domains with a wildcard certificate?
A: No, Let’s Encrypt wildcard certificates cannot secure specific subdomains individually (e.g., foo.example.com and bar.example.com).

Q2: Can HTTP DCV challenges be used for wildcard certificates?
A: No, Let’s Encrypt does not support HTTP-01 challenges for wildcard SSL.

Q3: Can I use third-party DNS hosting for wildcard SSL?
A: No, DNS must be hosted on your local cPanel server or within its DNS cluster.

Q4: Does this plugin secure system hostnames?
A: No, it only generates SSL certificates for cPanel accounts, not for WHM/cPanel services.

Q5: Are there rate limits for Let’s Encrypt SSL certificates?
A: Yes, Let’s Encrypt imposes significant rate and domain limits. Review the Let’s Encrypt Rate Limits before use.