The page loads, but the browser does not show a secure connection.
Open the site directly with https://.
If the certificate warning appears, do not add redirects yet.
Confirm the certificate covers the exact hostname you opened.
Check whether the certificate is expired or missing in cPanel.
If HTTPS itself works but the page still says Not Secure, check for page resources still loading over HTTP.
Do not force HTTPS first if HTTPS itself is broken. Fix the certificate problem before the redirect.
Privacy / certificate warning
Chrome or another browser shows a certificate or privacy warning.
Check the address bar: are you opening the root domain or the www version?
Make sure the certificate was requested for that exact name.
Confirm DNS points to the correct server before requesting a new certificate.
Try a private/incognito window to rule out old cached certificate information.
Do not simply click through a certificate warning on a customer site.
HTTPS works, but HTTP stays on HTTP
The certificate works, but visitors are not automatically sent to HTTPS.
If HTTPS is already working, the tested GoDaddy cPanel redirect is:
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Put it in the website document root as .htaccess, then test again in a private window.
This rule forces HTTP → HTTPS. It does not choose between www and non-www.
404 or 403 error
The domain reaches the server, but the website page is missing or forbidden.
Confirm the domain is added in cPanel.
Check the domain’s Document Root.
Make sure the actual site files are in that folder.
Confirm an index.html, index.php, or equivalent homepage exists.
Check permissions only after verifying the correct folder.
A 404/403 can be a website-folder problem, not an SSL problem.
Root domain works, but www fails
example.com works, but www.example.com does not.
Confirm DNS has a www record.
A common setup is a CNAME from www to the root domain.
Make sure the SSL certificate includes both names if you want both to work securely.
Test https://www.example.com directly.
Domain still shows parking or the old site
DNS may still be pointing somewhere else, or the change may still be cached.
At the registrar, check the root A record.
Remove only old parking records that conflict with the website records.
Keep unrelated MX/TXT records unless they truly need to change.
Try a private/incognito window and another network/device.
Allow time for DNS caches to update.
CertSage page will not load
certsage.php gives an error, blank page, or cannot find its files.
Confirm certsage.php is in the domain’s real document root.
Return to wizard step 5 and prepare your official download again using the confirmed document root. A version mismatch means stop and use supported 3.3.1 or wait for a compatibility review; do not bypass the check.
If no file downloads, allow downloads for this site and use a current browser over HTTPS. The file is processed locally. Rename any browser-added suffix so the uploaded name is exactly certsage.php.
If CertSage cannot create its folder, ask your host to confirm account Home is private and writable by PHP. Do not move private files into public_html or make them world-writable.
Make sure the private folder exists at the account Home level, outside public_html.
For a fresh installation, CertSage creates password.txt during initialization and generates account.key during the first production certificate acquisition if needed.
Do not copy another site’s account.key, password.txt, or certificate files into it.
The number of ../ levels depends on the real document root. Do not guess if the site lives deeper than /public_html/example.com.
Renewal cron job: manual setup required
EasySSLSetup requires the CertSage renewal cron job to be added manually in cPanel → Cron Jobs. Do not let CertSage install it automatically: CertSage 3.3.1 uses a whole-crontab read/modify/write command for automatic cron setup, and if the read of your existing crontab fails or comes back incomplete, unrelated scheduled jobs — including other websites’ jobs on a shared cPanel account — can be silently deleted — this pattern has wiped out real renewal jobs.
The correct renewal command, added manually exactly once:
Before changing cron, save a complete copy of the current crontab.
After adding the line, re-read the full crontab and confirm every unrelated line is unchanged and the new line appears exactly once.
If anything unrelated disappeared or changed, stop and restore your saved copy.
Create an empty autorenew.txt file in the private CertSage.example.com folder before first opening CertSage, so CertSage skips its automatic cron-install block while the marker remains. The marker does not prove the cron job exists — always verify the cron line itself.
If the command already exists once, leave it alone. Never create a duplicate.
The wrong website opens
The domain loads, but it displays another site from the hosting account.
Open cPanel → Domains.
Find the domain and read its Document Root.
Make sure it is not sharing the main domain’s root by accident.
Confirm the correct website files are inside the listed folder.
Force HTTPS switch is unavailable
cPanel may show the switch as off or unavailable even though a certificate is installed.
On some GoDaddy cPanel setups, the Force HTTPS switch may not be usable when AutoSSL is not active.
If the certificate is already valid, use a tested .htaccess redirect instead of assuming the certificate failed.
Always confirm HTTPS works before adding redirect rules.
No matching problem found. Try a shorter word such as SSL, DNS, 404, www, or cron.