How to run AutoSSL on your Domains to install an SSL via cPanel?

Open cPanel for your Hostworld hosting, then run AutoSSL from Security > SSL/TLS Status, or from Security > SSL/TLS Certificates > Wizard, to issue and install a Let’s Encrypt certificate on your domains. AutoSSL also runs automatically every 3 hours by default.

Before you start

• Your domain must resolve to the IP on the Hostworld server that hosts your cPanel account. Use our nameservers (ns1.serverworld.uk, ns2.serverworld.uk, ns3.serverworld.uk, ns4.serverworld.uk) or point A and AAAA records to the correct server IP.
• If you use Cloudflare or another CDN or WAF, be ready to allow HTTP DCV at /.well-known/pki-validation/ on port 80.
• You may be prompted to review and accept Let’s Encrypt’s terms in the Wizard before issuance can start.

Step 1: Sign in to cPanel from your Hostworld client area

1. Go to https://portal.hostworld.uk/ and sign in.
2. Open your hosting service, then use the Single Sign-On link to launch cPanel. WHMCS provides this so you do not need your cPanel password. If you do not see SSO, look for a “Login to cPanel” style link on the service page.

Step 2: Run AutoSSL in cPanel

If you see Security > SSL/TLS Status

1. Open Security > SSL/TLS Status.
2. Make sure the domains you want are included. If a domain shows as excluded, include it.
3. Click Run AutoSSL to request and install a Let’s Encrypt certificate.

Undo: If you excluded a domain by mistake, include it again and re-run AutoSSL.

If you see Security > SSL/TLS Certificates (unified)

1. Open Security > SSL/TLS Certificates.
2. Go to the Wizard tab. Click the Let’s Encrypt button to request the certificate. Accept Let’s Encrypt’s terms if asked.

Undo: If you started the Wizard in error, back out without submitting. No changes apply until you confirm the request.

Step 3: Clear DCV blockers, then run it again

• DNS not pointing to our server: the domain must resolve to an IP that exists on this server. If you use our DNS, set nameservers exactly to ns1.serverworld.uk, ns2.serverworld.uk, ns3.serverworld.uk and ns4.serverworld.uk at your registrar. If you keep external DNS, point A (and AAAA if used) to the server IP. Undo: If you changed nameservers but manage DNS elsewhere, switch back to your previous nameservers and update A or AAAA records instead. A typo in nameservers will take your site and email offline.
• Cloudflare or WAF blocks: 403 unauthorised or forbidden on the DCV path will fail AutoSSL. Temporarily disable the proxy for the record (DNS only) or relax WAF rules to allow /.well-known/pki-validation/, then run AutoSSL. Undo: Restore your previous Cloudflare or WAF settings after the certificate installs.
• IPv6 issues: an AAAA record that does not route to this server can cause local HTTP DCV 404 on IPv6. Remove the AAAA record during issuance if you do not serve the site over IPv6. Undo: Re-add the AAAA record once IPv6 is correctly configured or if you need it for other services.
• HTTP blocked by redirects or auth: ensure port 80 and the DCV path are reachable and not intercepted by rewrites or password protection. Undo: Restore your original rules after issuance.

Re-run AutoSSL from the same page you used in Step 2.

If it does not work

• New domains never auto-issue: in the unified SSL/TLS Certificates interface, open the Wizard tab and accept Let’s Encrypt’s terms, then request again.
• “Resolved to an IP that does not exist on this server”: point the A or AAAA record to the correct server IP, or unproxy Cloudflare until the certificate is issued, then try again.
• Local or private IP resolution: if the domain resolves to a private or wrong local IP, correct NAT or DNS so it resolves publicly to the server’s IP, then re-run.

If you are still stuck, open a support ticket and tell us the domain and the exact error shown in the AutoSSL log.

What next

If you want us to take a look or confirm your DNS for you, open a support ticket. You can also return to your services at portal.hostworld.uk to re-run AutoSSL later or add domains.