Free SSL isn't issuing — how to fix it
OrbixPanel issues free SSL certificates automatically via Let’s Encrypt. When it doesn’t, it’s nearly always one of a few causes — all quick to check. (New to certificates? Start with What is SSL.)
The checklist, in order
1. Does the domain point at this server? Let’s Encrypt proves you control the domain by reaching it over the public internet. The domain’s A record must point to your server’s IP.
dig +short yourdomain.com # should print your server's IPIf it’s blank or wrong, fix the A record and wait for DNS to propagate (5–30 min). → Domains & DNS
2. Is port 80 open? The validation happens over HTTP (port 80) before HTTPS exists. If your firewall blocks 80, issuance fails. Allow 80 and 443.
3. Did you just change DNS?
Propagation isn’t instant. If you installed before the A record resolved, SSL is
simply skipped — re-request it once dig shows the right IP.
4. www vs non-www.
If you serve both yourdomain.com and www.yourdomain.com, both names need A
records, or the certificate for the missing one will fail.
5. Rate limits. Let’s Encrypt limits how many certs you can request per domain per week. If you’ve retried many times, wait an hour and try again rather than hammering it.
Then re-request
Once the cause is fixed, request SSL again from the website’s panel. It should issue within seconds and then auto-renew — you won’t have to think about it again.
Running OrbixPanel? Free SSL is automatic and auto-renewing. OrbixPanel.com → — the free, self-hosted, AI-powered hosting control panel.