SSL Certificates

Secure your domains with SSL/TLS certificates. WisPanel supports Let's Encrypt, self-signed, and custom certificates.

Let's Encrypt (Recommended)

Issuing a Certificate:

1. Click Issue Certificate
2. Select domain(s)
3. Choose certificate type:
   • Single Domain: example.com only
   • Wildcard: *.example.com + example.com
   • Multi-Domain: Multiple specific domains
4. Enable Auto-Renewal (recommended)
5. Click Issue
6. Certificate issued within minutes

Automatic Renewal:

• Enabled by default
• Automatic renewal 30 days before expiration
• Renewal notifications sent via email
• No manual intervention needed

Self-Signed Certificate

1. Click Create Self-Signed
2. Enter domain name
3. Configure validity period (1-10 years)
4. Click Create
5. Suitable for testing, not for production
6. Browser shows security warning

Upload Custom Certificate

1. Click Upload Certificate
2. Provide:
   • Certificate file (.crt, .pem)
   • Private key (.key)
   • CA bundle (optional)
3. Verify certificate matches domain
4. Click Upload
5. Certificate immediately active

Certificate Management

View Certificate Details

1. Click certificate in list
2. View:
   • Issuer name
   • Validity period
   • Subject alternative names (SANs)
   • Fingerprint
   • Chain verification status

Force HTTPS

1. Domain settings > SSL
2. Toggle Force HTTPS
3. All HTTP traffic redirects to HTTPS
4. Use 301 redirect for SEO

Renew Certificate

1. For custom certificates, upload new one
2. For Let's Encrypt, automatic renewal
3. Manual renewal available if needed

Revoke Certificate

1. Click Revoke
2. Confirm action
3. Certificate becomes invalid
4. Domain no longer uses this certificate

Delete Certificate

1. Ensure not in use
2. Click Delete
3. Confirm deletion
4. Cannot be recovered

ACME Providers

• Let's Encrypt: Default provider, free, automatic renewal
• ZeroSSL: Free alternative to Let's Encrypt
• Google Cloud CA: Enterprise option
• Custom ACME: Configure your own provider

Troubleshooting

Certificate issuance fails:

• Verify domain is publicly accessible
• Check HTTP (port 80) is open
• DNS must be set correctly
• Some TLDs may have restrictions

Certificate warnings in browser:

• Domain name mismatch (use correct domain)
• Expired certificate (renew immediately)
• Mixed content (load all resources over HTTPS)

[Screenshot: ssl-certificate-list.png] [Screenshot: ssl-certificate-details.png]