ßæÏ:
 /usr/local/cpanel/bin/checkallsslcerts
ÇÏÎá åÐÇ ÇáÇãÑ æåÊÌÏ Çäå åíæáÏ ÇáÔåÇÏÉ ãä ÌÏíÏ Çæ
åíÎÈÑß Çä ÇáÓíÓÊã ÞÈá ÇáãæÚÏ ÈÜ 3 ÇíÇã ÇÐÇ æÌÏ ÇáÔåÇÏÉ ÇáÞÏíãÉ ãæÌæÏå åíÈÏá ÇáÔåÇÏÉ ÈÇÎÑì ÌÏíÏÉ

ÇÏÎá åÐÇ ÇáÇãÑ Ýì ÍÇáÉ Úãá Update ááÓí ÈÇäíá æÇáÐì íÓÇÚÏ Ýì ÊæáíÏ ÇáÔåÇÏÉ ÇíÖÇ

ßæÏ:
/usr/local/cpanel/scripts/upcp
Keep in mind that certificates are not issued instantly, and processing times can sometimes take up to 24 hours.

This can happen if your server's firewall is blocking access attempts from Comodo to validate the certificate, but validation is also sometimes delayed for a few hours during manual steps sometimes required by Comodo during the validation process. Anyone experiencing an issue with certificate issuance where it's been over 24 hours since the initial request for the certificate was made can open a support ticket using the link in my signature so we can check on the status of the order.
-------------------------------------

cPanel, L.L.C. offers valid cPanel & WHM license holders a free signed certificate for the services on your server’s hostname. This offer replaces the certificates for these services that meet any of the following conditions:

  • Maintains a weak signature algorithm.
  • Revoked.
  • Self-signed.
  • Invalid (For example, your server’s hostname must be valid and resolve in DNS).
  • Will expire soon, based on the following criteria:
    • cPanel-provided certificates that expire in less than 25 days.
    • Certificates issued by any other provider that expire in less than 3 days.


When the existing certificate meets any of these conditions, the server will order a replacement certificate when the /usr/local/cpanel/scripts/upcp maintenance runs. The system will download and install that certificate when available. If the existing certificate expires before the replacement certificate is available, the system will install a self-signed certificate, and then replace it with the ordered certificate when available.
--------------------------------------------------------


íãßäß ÇíÖÇ ÊÝÚíá Allow AutosSSL to replace
Each AutoSSL provider may wait for a specific amount of time to replace an AutoSSL-provided certificate before it expires. For example:
AutoSSL attempts to renew certificates that cPanel, Inc. provides when they expire within 15 days.
AutoSSL attempts to renew certificates that Let's Encrypt provides when they expire within 29 days.
Due to rate limits, AutoSSL prioritizes new certificates over the renewal of existing certificates.


When a certificate expires, your server installs a self-signed certificate. If your server meets the requirements to obtain a free cPanel-signed certificate, the server automatically orders one the next time that the upcp maintenance script runs. When the signed certificate becomes available, the server downloads and installs it.