{"id":524,"date":"2021-07-23T12:32:06","date_gmt":"2021-07-23T12:32:06","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/the-lets-encrypt-plugin\/"},"modified":"2021-07-23T12:32:06","modified_gmt":"2021-07-23T12:32:06","slug":"the-lets-encrypt-plugin","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/the-lets-encrypt-plugin\/","title":{"rendered":"The Let’s Encrypt\u2122 Plugin"},"content":{"rendered":"<\/p>\n
\n
\n
\n

Valid for versions 88 through the latest version<\/em><\/p>\n<\/div>\n

\n

Version:<\/h4>\n

82<\/h4>\n

84<\/h4>\n

86<\/h4>\n

88<\/h4>\n<\/div><\/div>\n
\n

Overview<\/h2>\n

This plugin allows the AutoSSL feature to issue certificates from the Let\u2019s Encrypt\u2122 provider. You can use this plugin if you do not want to use cPanel\u2019s default provider. Let\u2019s Encrypt can issue certificates faster than the cPanel (powered by Sectigo) default provider. It also allows you to secure wildcard domains, which the default provider cannot do. However, unlike the default provider, Let\u2019s Encrypt imposes significant rate and domain limits. For more information, read our Guide to SSL documentation.<\/p>\n

\n
Important:<\/div>\n
\n
    \n
  • This plugin does not<\/strong> generate hostname certificates for your system\u2019s services. It only generates SSL certificates for your cPanel accounts. For more information, read our Manage AutoSSL documentation.<\/li>\n
  • Let\u2019s Encrypt provides all future SSL and Wildcard SSL certificates when you select Let\u2019s Encrypt as your default provider. For more information on generating SSL certificates, read our Generate an SSL Certificate and Signing Request documentation.<\/li>\n
  • The Common Name (CN) entry of an SSL certificate is cosmetic and does not<\/strong> affect the security of a certificate.<\/li>\n
  • An SSL certificate\u2019s CN does not<\/strong> need to be the main domain. The certificate covers all<\/em> domains listed in the certificate\u2019s Subject Alternative Name (SAN) field.<\/li>\n<\/ul><\/div>\n<\/div>\n

    Wildcard domains<\/h3>\n

    The Let\u2019s Encrypt provider allows AutoSSL to use wildcard domains to reduce the number of domains for each certificate. This helps reduce the size of SSL certificates, which will reduce the time of the SSL\/TLS handshake process. This also allows users to secure more domains without reaching Let\u2019s Encrypt\u2019s domain limits.<\/p>\n

    For example, your example.com<\/code>, www.example.com<\/code>, and mail.example.com<\/code> domains share a website. The Let\u2019s Encrypt provider lets AutoSSL acquire a certificate for only the example.com<\/code> and *.example.com<\/code> domains. When the issued certificate contains the *.example.com<\/code> wildcard domain, that certificate also matches all first-level subdomains of example.com<\/code>. In this example, this includes the www.example.com<\/code> and mail.example.com<\/code> domains.<\/p>\n

    Limitations<\/h4>\n

    If you use the Let\u2019s Encrypt plugin to issue certificates for wildcard domains, be aware that:<\/p>\n

      \n
    • \n

      This plugin cannot use HTTP DCV challenges to issue certificates for wildcard domains. This is because Let\u2019s Encrypt does not support this type of challenge. For more information, read Let\u2019s Encrypt\u2019s HTTP-01 challenge type documentation.<\/p>\n<\/li>\n

    • \n

      You cannot use this plugin to obtain certificates for wildcard domains if you use third-party DNS hosting. You must<\/strong> host DNS on your local cPanel & WHM server or within the server\u2019s DNS cluster.<\/p>\n<\/li>\n<\/ul>\n

      Installation<\/h2>\n

      To install the plugin, perform the following steps:<\/p>\n

        \n
      1. \n

        Log in to the server as the root<\/code> user.<\/p>\n<\/li>\n

      2. \n

        Run the following command:\n<\/p>\n

        \n
        \/usr\/local\/cpanel\/scripts\/install_lets_encrypt_autossl_provider<\/code><\/pre>\n<\/div>\n<\/li>\n
      3. \n
        Log in to WHM and navigate to the Manage AutoSSL<\/em> interface (WHM<\/em> >> Home<\/em> >> SSL\/TLS<\/em> >> Manage AutoSSL<\/em>).<\/p>\n<\/li>\n
      4. \n
        In the Providers<\/em> tab, select the Let\u2019s Encrypt\u2122<\/em> option. The interface will display the Terms of Service<\/em> section.<\/p>\n<\/li>\n
      5. \n
        Review Let\u2019s Encrypt\u2019s terms of service. If you agree, select the I agree to these terms of service<\/em> option.<\/p>\n<\/li>\n
      6. \n
        Click Save<\/em>.<\/p>\n<\/li>\n<\/ol>\n
        Recreate your registration<\/h2>\n
        In the Manage AutoSSL<\/em> interface, check the Recreate my current registration with \u201cLet\u2019s Encrypt\u2122\u201d.<\/em> box after you accept the terms of service to recreate your provider registration. This replaces your current registration with a new one. This is optional and not required to use the Let\u2019s Encrypt provider.<\/p>\n
        Uninstall the plugin<\/h2>\n
        To uninstall the plugin, perform the following steps:<\/p>\n
          \n
        1. \n
          Log in to the server as the root<\/code> user.<\/p>\n<\/li>\n
        2. \n
          Run the following command:\n<\/p>\n
          \n
          \/usr\/local\/cpanel\/scripts\/uninstall_lets_encrypt_autossl_provider<\/code><\/pre>\n<\/div>\n<\/li>\n<\/ol><\/div>\n","protected":false},"excerpt":{"rendered":"
          Valid for versions 88 through the latest version Version: 82 84 86 88 Overview This plugin allows the AutoSSL feature to issue certificates from the Let\u2019s Encrypt\u2122 provider. You can use this plugin if you do not want to use cPanel\u2019s default provider. Let\u2019s Encrypt can issue certificates faster than the cPanel (powered by Sectigo) …<\/p>\n","protected":false},"author":1,"featured_media":525,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/524"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=524"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/524\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/525"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}