1. Login as root
2. If you want to generate SSL Certificate for WHM/CPanel, manually run the following command:
/usr/local/cpanel/bin/checkallsslcerts --verbose
3. To run SSL check for all domains, run
/usr/local/cpanel/bin/autossl_check --all
4. To run SSL for one domain under a username <username>, run
/usr/local/cpanel/bin/autossl_check --user <username>
here <username> is your home user
echo $HOME or use the pwd command to see something like
/home/<username>/<directory>
If you have used this <username> for setting up your domain, use the <username> for the domain SSL renewal
The check will automatically fetch SSL from Sectigo or the SSL provider you have configured under your CPanel/WHM
Note: Sometimes you have to run 2-3 times for the cert to be fetched. There is a polling duration (2-3 minutes) before your certificate is fetched and renewed. So run commands in 3/4 and wait for 3-4 minutes.
5. If polling is taking more than 10 minutes, run the following
/usr/local/cpanel/bin/autossl_check_cpstore_queue --force
When Nothing Works
When nothing works after waiting for 30 minutes-1 hour, change the certificate provider.
WHM/CPanel has the option to choose Let's Encrypt.
Sectigo has higher rate limits and if you are in one of those unlucky days, the certificate will not get renewed.
Once you change to Let's Encrypt, a day or two later, you may switch back to Sectigo.