Installing on DirectAdmin

Free SSL with Let's Encrypt in DirectAdmin

By the Domain India teamPublished 6 min read
Knowledge base article
Contents (5 sections)

Yes, SSL is free on Domain India DirectAdmin hosting. DirectAdmin issues a Let's Encrypt certificate by itself once your domain points at your hosting, so you secure your domain at no cost and the certificate renews itself. This page gives the short version. The full walkthrough, with every failure and its fix, is in the main guide.

Key takeaways

Point your domain to your DirectAdmin hosting and wait: DirectAdmin issues the free Let's Encrypt certificate automatically, with no request form, and renews it by itself well before it expires. To confirm, open Account Manager › SSL/TLS Certificates in DirectAdmin and check the certificate list. If a name is listed there as failed, the cause is almost always DNS.

Full guide

For step-by-step screens, forcing HTTPS and a table of failures, read How to enable Let's Encrypt SSL certificates in DirectAdmin.

1. What is already set up for you

We read these settings on our DirectAdmin server on 30 September 2026:

SettingValueWhat it means
Enable ACMETicked by defaultCertificates are issued and renewed automatically; there is nothing to request
ACME providerDefault (Let's Encrypt)The certificate is free
Names triedYour domain, www, mail, ftp, pop and smtpA name gets a certificate only if it reaches our server
Prefer wildcard certificatesTicked by defaultOne wildcard certificate is issued where possible; otherwise a certificate with the exact names
RenewalAutomatic, well before expiryNothing to do while DNS stays the same
Failed namesListed on the page with the reasonUsually DNS; fix it and DirectAdmin retries
Repeated failuresAutomatic issuing can be switched off for that domainCheck that Enable ACME is still ticked, then ask support
DirectAdmin ACME settings tab: Enable ACME ticked, Key type ECDSA P-256, Prefer wildcard certificates ticked, and ACME provider set to Default (Let's Encrypt)
ACME settings: automatic certificates are on by default.

Let's Encrypt certificates are domain validated: they prove you control the domain and encrypt traffic, which is what almost every website, blog and shop needs. If you need a paid certificate for a specific reason, ask support, or upload a certificate you bought elsewhere.

2. Check that the certificate was issued

  1. Check DNS.
    Your domain's A record, or its nameservers, must point to your DirectAdmin hosting, and the site must open over http://. Use the values on your hosting service's page in the client area; see How do I change my nameservers.
  2. Wait.
    DirectAdmin issues the certificate on its own once the domain reaches our server. There is no option to choose and no form to save.
  3. Open DirectAdmin
    from your hosting services in the client area.
  4. Open Account Manager › SSL/TLS Certificates.
    On the Manage certificates tab, the Certificate list shows each certificate with its DNS names and expiry date.
  5. Check for failures.
    A name DirectAdmin could not secure is listed under Automatic certificate provisioning with the reason. Fix it as shown in section 4.

3. Send visitors to HTTPS

A certificate does not redirect visitors by itself. Turn on DirectAdmin's HTTPS redirect for the domain if your panel shows it, or add this to the .htaccess file in public_html:

apache
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Use one method, not both. In WordPress, also change the two addresses under Settings › General to https://. If the padlock still warns, the page loads images or scripts over http://; see Loading mixed (insecure) display content.

4. Why a name fails

DirectAdmin Manage certificates page: an empty certificate list, a DNS names without TLS certificate list, and an Automatic certificate provisioning box listing failed HTTP checks for names that do not reach the server
Manage certificates shows each certificate and, when automatic issuing fails, the reason.
What you seeUsual causeFix
Your domain under failed HTTP checksThe domain still points to another host, or a proxy such as Cloudflare answersPoint the A record to our server, pause the proxy, wait for DNS
Only www or another name is listedThat name has no DNS record, or it points to another serverAdd a record pointing to your hosting if you want the name covered
CAA errorA CAA record allows only another certificate authorityAdd letsencrypt.org to the CAA record
Worked before, renewal now failsDNS moved, or a rule blocks /.well-known/acme-challenge/Restore DNS, remove the blocking rule
Nothing is issued although DNS is rightAutomatic issuing may have been switched off for the domain after repeated failuresCheck that Enable ACME is ticked on the ACME settings tab

After you fix the cause, wait: DirectAdmin retries on its own. If the name still fails, open a support ticket with the domain name.

You do not request a wildcard certificate (*.yourdomain.com) either. With Prefer wildcard certificates ticked, DirectAdmin issues a single wildcard certificate when that is possible and a certificate with the exact names when it is not.

5. DirectAdmin hosting at Domain India

Every Domain India shared hosting plan includes free SSL: AutoSSL with Let's Encrypt on cPanel and Let's Encrypt in DirectAdmin. DirectAdmin plans start at ₹100 a month, excluding 18% GST (Domain India list price on 19 September 2026), and include weekly JetBackup backups. On cPanel, see AutoSSL in cPanel instead.

DA Starter
₹100/mo + GST
  • 10 GB NVMe SSD Storage
  • 50 GB Monthly Bandwidth
  • 1 Website
  • 5 Email Accounts
See plan details

Prices on the cards exclude 18% GST.

Is Let's Encrypt SSL free on Domain India DirectAdmin hosting?

Yes. DirectAdmin issues a free Let's Encrypt certificate automatically once your domain points at your Domain India DirectAdmin hosting. You do not request it, and it renews automatically.

When does DirectAdmin renew a Let's Encrypt certificate?

Renewal is automatic and happens well before the certificate expires. You do nothing while the domain keeps pointing to the server. If a renewal fails, the cause is usually a DNS change.

Why has my Let's Encrypt certificate not been issued?

Usually because the domain or www does not point to the DirectAdmin server yet, a proxy answers instead, or a CAA record allows only another certificate authority. Fix the DNS and wait; DirectAdmin retries on its own. If it still fails, open a support ticket with the domain name.

Can I get a wildcard SSL certificate in DirectAdmin?

DirectAdmin decides this by itself. Prefer wildcard certificates is ticked by default, so one wildcard certificate is issued when possible; otherwise DirectAdmin issues a certificate with the exact names.

Do I need to buy an SSL certificate for my DirectAdmin website?

No. A free Let's Encrypt certificate encrypts your site and removes the browser's "Not secure" warning, which is what most websites need. You can still upload a certificate bought elsewhere if you need one.

Ready to secure your site? Check your DNS with How do I change my nameservers, open DirectAdmin from your hosting services, or compare DirectAdmin hosting plans.

Certificate still not issued?

Send us the domain and the reason DirectAdmin shows for the failed name, and we will check the DNS and the certificate with you.

Open a support ticket

Was this article helpful?

Your answer helps us decide what to improve next.

Still need help? Open a support ticket and our team will reply.

Prefer an app? Add this site to your home screen.Get the app