How to exclude your domains from cPanel auto SSl validation via cPanel

cPanel's AutoSSL feature automatically provisions and renews free SSL certificates (via Let's Encrypt or cPanel's own providers) for all domains on your account. If you need to exclude a specific domain or subdomain from this automatic process — for example, if you use a third-party SSL or manage certificates manually — you can do so directly from cPanel.

Excluding a Domain from AutoSSL

1. Log in to your cPanel account.
2. Navigate to the Security section and click SSL/TLS Status.
3. You will see a list of all domains and subdomains on your account, along with their current certificate status.
4. Locate the domain or subdomain you want to exclude from AutoSSL.
5. Check the box next to that domain.
6. Click the Exclude from AutoSSL button (or select it from the actions dropdown).
7. Wait for the process to complete. A confirmation message will appear once the domain has been excluded.

Important Notes

• Excluding a domain means cPanel will no longer issue or renew an SSL certificate for it. If the existing certificate expires, the domain will show a security warning in browsers.
• You can re-include a domain at any time by returning to SSL/TLS Status, checking the excluded domain, and clicking Include in AutoSSL.
• Exclusion applies to the specific domain or subdomain only — other domains on your account continue to receive AutoSSL certificates normally.
• If you are using a third-party SSL certificate (e.g., purchased from a CA), you should still install and manage it through the SSL/TLS → Install and Manage SSL section.
• AutoSSL runs automatically every 24 hours. Newly added domains are included by default unless excluded.

Troubleshooting

• "Exclude" button not visible: Your hosting provider may have disabled this feature. Contact your hosting provider or system administrator.
• Domain reappears in AutoSSL: Ensure no cron jobs or plugins are re-adding the domain. Check with your hosting provider if they override AutoSSL settings.
• Certificate still showing for excluded domain: The previously issued certificate remains valid until its expiry date. Exclusion only prevents future issuance and renewal.
• Site showing insecure after exclusion: Install a manual certificate via SSL/TLS → Manage SSL sites, or enforce HTTPS redirects through your .htaccess file.