Confirm the domain is active in the account and that both A and any AAAA records reach the correct destination. Record the required hostnames and existing certificate. Check proxy, redirect and CAA settings that may affect the selected certificate authority.

1. Open SSL > Automatic SSL in the end-user panel. Select the exact domain instead of starting a bulk issuance for unrelated sites.
2. Check the certificate authority configured by the administrator and the names selected for issuance. Include only hostnames you control and can validate.
3. Start installation and inspect its SSL logs. For HTTP validation, ensure the challenge path is reachable externally through the actual public DNS route.
4. After successful issuance, inspect the certificate names, issuer and expiry date. Test the site over HTTPS before enabling a forced redirect.
5. Update application URLs and fix mixed-content references as required. Avoid applying HSTS to an untested domain or all subdomains before confirming their HTTPS readiness.
6. Monitor renewal status and retain working validation conditions. A later DNS or proxy change can break renewal even when the current certificate still works.

The visitor may see a certificate installed at the proxy rather than the origin. Verify both connections and the proxy origin settings; installing one certificate does not configure the other endpoint.

Use an external browser or TLS client to inspect the certificate presented by the public hostname. Confirm the chain is trusted, the name matches and the application has no redirect loop. Check www and other intended names separately.

For failed issuance, use the log to distinguish unreachable validation, invalid domain, suspension, CAA restrictions and authority limits. Correct the cause before repeated retries. Do not remove a currently valid certificate merely because a replacement attempt failed.

• Editing an authoritative DNS zone in Webuzo
• Securing the Webuzo panel hostname
• Adding a domain and website in Webuzo
• Adjusting per-domain PHP settings in Webuzo

• Webuzo: Lets Encrypt Zero SSL
• Webuzo: Automatic SSL
• Let's Encrypt: Challenge Types