HTTPS protects logins and visitor data. The domain must already resolve to this cPanel server before a certificate can normally be issued.
Steps
- Confirm that both the root domain and www resolve to the hosting server. Temporarily remove incorrect A, AAAA or CAA records that prevent validation.
- Open cPanel → Security → SSL/TLS Status. Select the domain and run AutoSSL if the interface offers that action.
- Wait for the certificate status to become secure. A certificate warning usually means the hostname does not match, the certificate expired or DNS still points elsewhere.
- Open cPanel → Domains and enable Force HTTPS Redirect for the domain. Do not create a second competing redirect in WordPress or .htaccess.
- Visit http://your-domain and a private browser window. Confirm one redirect to https:// and inspect important pages, forms, images and scripts.
Verify the result
The browser should show a valid secure connection without mixed-content warnings, and both www and non-www should land on one chosen HTTPS address.
Important: Do not bypass certificate warnings or disable TLS. If an external proxy or CDN handles DNS, use its documented SSL mode and avoid conflicting redirect loops.
