Managing SSL certificates in PanelAlpha

• An SSL (Secure Sockets Layer) certificate encrypts the connection between your website and your visitors' browsers.
  It's essential for Security, Trust, SEO and Compliance

• Your Site Has SSL When your URL starts with https:// instead of http:// and the Browser shows a padlock icon in the address bar (No security warnings appear).

• Navigate to My Instances
• Click Manage Site on your WordPress instance

• Go to the Site Details tab
• Scroll to the Security section
• Look for SSL status indicator

• ✅ Active - SSL certificate is installed and working
• ⏳ Pending - Certificate is being generated
• ❌ Not Installed - No SSL certificate configured
• ⚠️ Expiring Soon - Certificate needs renewal
  

• From Site Details > Security section
• Click the Manage button next to SSL status

• The SSL management panel will open

Let's Encrypt (Recommended)

• Free SSL certificates
• Automatically renews every 3 months
• Trusted by all major browsers
• Easy setup - one-click installation

• In SSL management, select Generate Free Let's Encrypt
• Click Save changes

• Wait 2-5 minutes for certificate generation
• Your site will automatically use HTTPS

• No cost
• Auto-renewal (no manual work needed)
• Same security level as paid certificates
• Supported by all modern browsers

• Most websites
• Blogs and business sites
• E-commerce stores
• Portfolio websites
  
  

Option 2: Self-Signed Certificate

• Certificate you generate yourself
• Not trusted by browsers (shows security warnings)
• Free but not recommended for production sites

• Development and testing environments only
• Internal company websites (not public)
• Temporary solutions while waiting for a proper certificate

• Click Manage 
  
• Select Generate Free Self-Signed Certificate
  
• Certificate will be created instantly

⚠️ Warning:
Visitors will see "Not Secure" warnings. Never use for public websites!

• SSL certificate purchased from a certificate authority (CA)
• Offers additional features like:
  • Extended validation (EV) certificates
  • Organisation validation (OV) certificates
  • Wildcard certificates (*.yourdomain.
  • Multi-domain certificates

• Enterprise websites requiring EV certificates
• Multiple subdomains (wildcard certificate)
• Specific compliance requirements

• Purchase a certificate from HostAfrica 
• Generate a CSR (Certificate Signing Request) if needed

• From the SSL management panel, select Custom SSL Certificate

• Upload your certificate files:
  • Certificate (.crt or .cer)
  • Private Key (.key)
  • Certificate Chain/CA Bundle (if provided)
• Click Save Changes

• Initiate Installation: Click the Save Changes button (1 minute)
• Domain Validation: System verifies domain ownership (2-5 minutes)
• Certificate Generation: CA creates a certificate (5-30 minutes for Let's Encrypt)
• Installation: Certificate applied to your site (1-2 minutes)
• Propagation: Changes spread across the internet (up to 24 hours)

• Show mixed content warnings temporarily
• Have brief periods of inaccessibility
• Display certificate warnings during propagation

This is normal! Give it time to complete

• Log in to WordPress admin
• Go to Settings > General
• Update both URLs to use https://:
  • WordPress Address (URL)
  • Site Address (URL)
• Save changes

• Install SSL Plugin: Use "Really Simple SSL" or "Easy HTTPS Redirection"
• Search and Replace: Use database search-replace to update URLs
• Update Hardcoded Links: Edit templates to use relative URLs
• Check External Resources: Ensure CDN and external scripts use HTTPS

• SSL certificate not installed
• Certificate expired
• Mixed content on page
• Certificate doesn't match domain name

• Verify SSL is installed in Panel Alpha
• Check expiration date
• Run SSL checker tool (online)
• Fix mixed content warnings
• Ensure certificate covers your domain

• Certificate is for wrong domain
• Certificate expired
• Browser cache issue
• Incomplete certificate chain

• Clear browser cache and cookies
• Verify domain matches certificate
• Reinstall certificate
• Contact support if issue persists

• Broken padlock icon
• "Not fully secure" message
• Some elements don't load

• Install "Really Simple SSL" plugin
• Or manually update all URLs in database:

• Verify the domain DNS is pointing to HostAfrica
• Check the domain has propagated (use DNS checker)
• Ensure port 80 and 443 are not blocked
• Disable any security plugins temporarily
• Try again in 30 minutes
• Contact support if the problem continues

• Always Use Let's Encrypt or Better: Free and secure
• Never let certificates expire
• Force HTTPS: Redirect all HTTP traffic to HTTPS
• Update Regularly: Keep WordPress and plugins updated
• Monitor Expiration: Check SSL status monthly
• Use Strong Ciphers: Panel Alpha configures this automatically

• SSL Labs: ssllabs.com/ssltest/
• Why No Padlock: whynopadlock.com
• SSL Checker: sslshopper.com/ssl-checker.html

• Certificate validity
• Certificate chain
• Protocol support
• Cipher strength
• Expiration date

NEXT ARTICLE: Getting Support