Guide · updated November 15, 2026
How to automate SSL renewal (ACME) on shared hosting
On shared hosting you rarely need to run an ACME client yourself: the control panel usually has one built in. Turning it on is the single best fix before certificates drop to 100 days on March 15, 2027.[CA/Browser Forum]
1. cPanel: AutoSSL
AutoSSL automatically installs domain-validated certificates, and Let’s Encrypt is the default provider included with the cPanel licence.[cPanel 1 (cPanel & WHM Documentation — Manage AutoSSL), 2 (cPanel & WHM Documentation — The Let's Encrypt Plugin)]
- In cPanel, open SSL/TLS Status.
- Check every domain shows an AutoSSL certificate; click Run AutoSSL if not.
- If a domain still carries a purchased certificate you no longer need, remove it so AutoSSL can take over. (AutoSSL won’t replace it unless your host enabled that option.[cPanel])
cPanel’s documentation doesn’t say how many days before expiry AutoSSL renews; we list that as unknown. cPanel guide
2. Plesk: SSL It!
SSL It! issues free Let’s Encrypt certificates and renews free Let’s Encrypt and DigiCert certificates 30 days before they expire. It can’t renew paid certificates.[Plesk] In Plesk: Websites & Domains → SSL/TLS Certificates → choose the free certificate. Plesk guide
3. Your host’s own free SSL
Many hosts switch this on per site, for example Hostinger’s Lifetime SSL, Bluehost’s AutoSSL and SiteGround’s Let’s Encrypt.[Hostinger; Bluehost; SiteGround] See the provider guides.
4. If you must keep a purchased certificate
- Namecheap: SSL Manager adds a cron job via a file upload in cPanel and installs each new certificate; it’s single-domain only, and ACME is scheduled.[Namecheap]
- GoDaddy: Deluxe Automated SSL re-installs via ACME after the first setup. Certificates auto-installed on GoDaddy hosting are handled for you.[GoDaddy 1 (GoDaddy Help — Why are SSL certificate validity periods changing?), 2 (GoDaddy Help — Understanding validity vs. subscription periods for SSL certificates)]
Then check it worked
Run the checker after your next renewal: an automated setup shows each certificate replaced well before it expires.
Questions
Can I use ACME on shared hosting without root access?
Usually through your control panel rather than a command line: cPanel’s AutoSSL and Plesk’s SSL It! obtain and renew free certificates for you. Namecheap’s SSL Manager can be set up with a file upload in cPanel.
Does AutoSSL renew purchased certificates?
No. AutoSSL manages the certificates it issues. An optional setting lets it replace non-AutoSSL certificates that are invalid or expire within 3 days.
Does Plesk renew paid certificates?
No. Plesk says SSL It! cannot automatically renew paid certificates. It renews free Let’s Encrypt and DigiCert certificates 30 days before expiry.
Sources
- cPanel & WHM Documentation — Manage AutoSSL (cPanel, accessed November 15, 2026)
- cPanel & WHM Documentation — The Let's Encrypt Plugin (cPanel, accessed November 15, 2026)
- Plesk Obsidian Administrator Guide — Securing Connections with the SSL It! Extension (Plesk, accessed November 15, 2026)
- Namecheap Knowledgebase — How your SSL coverage works (Namecheap, accessed November 15, 2026)
- GoDaddy Help — Why are SSL certificate validity periods changing? (GoDaddy, accessed November 15, 2026)
- GoDaddy Help — Understanding validity vs. subscription periods for SSL certificates (GoDaddy, accessed November 15, 2026)
- Hostinger Docs — SSL Certificates (Hostinger, accessed November 15, 2026)
- Bluehost Help — Free SSL with Bluehost AutoSSL (Bluehost, accessed November 15, 2026)
- SiteGround KB — How to manage your SSL certificates in Site Tools (SiteGround, accessed November 15, 2026)
- CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026) (CA/Browser Forum, accessed November 15, 2026)
Facts on this page last checked November 15, 2026.