Every StackCP hosting package includes a free wildcard SSL certificate. However, to utilise the free SSL certificate, the domain name must use our nameservers. Here’s why and how to resolve issues if you can’t activate the free SSL.

Required Nameservers #

To use the free SSL, ensure your domain points to the following nameservers:

• ns1.stackdns.com
• ns2.stackdns.com
• ns3.stackdns.com
• ns4.stackdns.com

Common Issues and Solutions #

1. Activate Free SSL Button Not Visible:
   • If the Activate Free SSL button is not showing in the SSL/TLS section, check the following:
2. DNSSEC Enabled:
   • DNSSEC can block the platform from verifying the domain name with StackCP nameservers.
   • To check this, perform a Whois lookup. If DNSSEC is signed, disable it at your domain registrar.
3. Nameserver Propagation:
   • Recently changed nameservers? It can take up to 48 hours for propagation, though it’s often faster.
   • Use Google’s Public DNS and flush the DNS cache to clear resolvers.
4. Acme-Challenge CNAME Records:
   • Acme-challenge CNAME records validate Let’s Encrypt SSL certificates.
   • Remove these records from your DNS zone if present. Example: _acme-challenge.example-domain.com.
   • Once removed and DNS propagated, the Activate Free SSL button should appear.
5. Nameserver Sub-Delegation:
   • Sub-delegation means the nameservers are pointing to StackCP via another provider, but at the registry, they point elsewhere.
   • This occurs when StackCP nameservers are added as NS records in the DNS instead of as primary nameservers.
   • If this is the case, contact your domain provider to resolve the issue.

CP CLOUD HOSTING ensures that these steps will help you successfully activate your free SSL certificate, securing your website effortlessly.