Automatic SSL Certificates for Every Domain
CyberPanel issues, installs, and auto-renews SSL certificates for your websites, hostname, and mail server — with three certificate authorities and zero manual work.
SSL Certificate Manager
All certificates active & auto-renewing
Enterprise SSL, Zero Configuration
Every SSL capability you need — from one-click issuance to wildcard certificates and mail server encryption.
One-Click SSL Issuance
Issue SSL for any domain with a single click. CyberPanel handles validation, installation, and web server configuration automatically.
- HTTP-01 validation (works with any DNS)
- Automatic www subdomain inclusion
- Installs to OLS vhost + SSL listener
- ECDSA ec-256 keys for performance
Three-Tier CA Fallback
If Let's Encrypt hits rate limits, CyberPanel automatically falls back to ZeroSSL, then acme.sh — no manual intervention needed.
- Let's Encrypt (primary CA)
- ZeroSSL with auto EAB credentials
- acme.sh as final fallback
- Seamless failover — zero downtime
Wildcard Certificates (SSL v2)
Issue wildcard certificates covering all subdomains with DNS-01 validation via Cloudflare API or CyberPanel PowerDNS.
- *.domain.com + domain.com in one cert
- DNS-01 validation (no HTTP needed)
- Cloudflare & PowerDNS support
- Auto DNS record verification
Auto-Renewal Engine
A cron-based renewal system checks every certificate and renews 15 days before expiry. Self-signed certs are automatically replaced.
- 15-day pre-expiry renewal
- Replaces self-signed certs automatically
- Skips custom-uploaded certificates
- Rebuilds Postfix SNI map after renewal
Mail Server SSL
Secure Postfix and Dovecot with one click. Per-domain SNI maps let each domain serve its own certificate for SMTP and IMAP.
- Postfix + Dovecot certificate install
- Per-domain SNI map (vmail_ssl.map)
- Mail AutoDiscover SSL setup
- Auto-restarts mail services
Hostname & Panel SSL
Secure the CyberPanel admin panel (port 8090), OLS WebAdmin, and SSH server with trusted SSL certificates.
- Panel (lscpd) certificate
- OLS WebAdmin certificate
- FastAPI SSH server certificate
- One-click issuance for all three
SSL in Three Steps
From zero to HTTPS in under a minute — no terminal access required.
Select Your Domain
Choose any website, child domain, or alias from the CyberPanel dashboard. The system auto-detects DNS records and www subdomains.
Issue Certificate
Click "Issue SSL." CyberPanel tries Let's Encrypt first, falls back to ZeroSSL or acme.sh automatically if needed.
Auto-Renew Forever
The renewal cron checks all certificates daily and renews 15 days before expiry. You never touch SSL again.
Built-In SSL Engine & Custom OLS Binary
CyberPanel includes a pure Python ACME v2 client and a custom OpenLiteSpeed binary with AutoSSL — no external dependencies.
CustomACME — Pure Python ACME v2 Client
A full ACME v2 protocol implementation in Python. Creates RSA 2048-bit account keys, handles JWS signing, HTTP-01 challenges, order lifecycle, and certificate download — without depending on certbot or acme.sh.
AutoSSL in Custom OLS Binary
CyberPanel's custom OpenLiteSpeed build includes server-level AutoSSL. Enable it once in httpd_config.conf and the web server itself handles SSL issuance — no panel intervention needed.
TLS 1.2+ with OCSP Stapling
Every SSL listener is configured with TLS 1.2 minimum, ECDHE key exchange, OCSP stapling, session caching, and HTTP/2 + SPDY support out of the box.
Centralized ACME Challenge
All HTTP-01 challenges route to a single directory regardless of the website's document root — simplifying validation across hundreds of domains without per-site configuration.
Wildcard SSL via DNS-01 Validation
Issue a single certificate covering your root domain and every subdomain. SSL v2 uses DNS-01 challenges through the Cloudflare API or CyberPanel's built-in PowerDNS — no HTTP access required.
HTTPS for Every Domain — Automatically
CyberPanel's SSL Manager is included free in every installation. Secure your websites, mail, and panel in minutes.