Why AutoSSL Doesn’t Cover Service Subdomains for Alias Domains in cPanel
Overview
When adding domains in cPanel, you may notice that AutoSSL does not issue SSL certificates for service subdomains (e.g., autodiscover.domain.com, cpcalendars.domain.com, webdisk.domain.com) if the domain is added as an alias (i.e., with “Share Document Root” checked). This article explains why and provides alternative solutions.
Domain Types in cPanel
| Domain Type
|
Description
|
Service Subdomains Supported by AutoSSL
| | --- | --- | --- | |
Addon Domain
|
Has its own document root. Used for separate websites.
|
✅ Yes
| |
Alias Domain
|
Shares the document root of another domain. Often used for redirection.
|
❌ No (only core subdomains like mail, cpanel, webmail)
|
When a domain is added as an alias, cPanel does not provision service subdomains, and AutoSSL will not issue certificates for them.
cPanel Official Doc on This Behavior
Recommended Solutions
Option 1: Use Addon Domain
If you want full service subdomain support (e.g., for calendars, WebDAV, or email autodiscovery):
-
Re-add the domain as an addon domain
-
Ensure “Share Document Root” is unchecked
-
AutoSSL will automatically include service subdomains
Option 2: Use Cloudflare (Recommended for Alias Domains)
If you prefer to use alias domains but still need SSL:
-
Point the domain to Cloudflare
-
Enable proxy mode
-
Cloudflare will handle SSL termination, including service subdomains
Migrating WordPress Multisite?
If you’re running a WordPress multisite setup using domain mapping:
-
Domains are often added as aliases in cPanel
-
Use Cloudflare for mapped domains to ensure full SSL coverage
-
Or switch to addon domains if required
Need Help?
If you’re unsure how to configure your domains or need help with migration, feel free to open a support ticket — our team is happy to assist.