Skip to content

← All integrations

Web server · Apps and databases

Renews one cPanel website certificate with AutoSSL takeover and TLS checks.

The appliance runs the package and connects to cPanel through cPanel UAPI over HTTPS on port 2083. No agent is installed on cPanel.

What happens

  1. The appliance connects to cPanel through cPanel UAPI on port 2083.
  2. Select a website on its owning cPanel account. The agent checks name coverage and excludes the website’s covered names from AutoSSL when its list can be read.
  3. UAPI installs certificate, key and CA bundle and updates the website. The agent reads back the leaf and checks HTTPS 443 with the domain as SNI for up to 60 seconds.

Technical details

Connection
The package runs on the appliance, which connects over HTTPS to cPanel UAPI, port 2083. No agent is installed.
Service ports
2083
You need
cPanel > Security > Manage API Tokens > Create: give the token a name and choose no expiry or an expiry date. Enter the cPanel account name as user and the token as password/token. The account needs the SSL/TLS feature (sslinstall). Use the account that owns the website.
Platform
cPanel UAPI, API tokens 80+
Actions
Discovery, Installation, Verification, Rollback
Packages
cpanel-api 1.0.0
Note
  • Restoration uses cPanel’s retained certificate and matching key; a first installation can be removed. Rollback uses the certificate ID, deployed fingerprint and added AutoSSL exclusions and preserves later certificate changes. WHM service certificates are separate.

Certificate requirements

sslbrain offers: RSA 2048/4096, ECDSA P-256/P-384. Supply the certificate as PEM with a matching unencrypted key.

Get started