10-10-2026, 06:35 PM
Quick answer
Open Website in aaPanel Free Edition, select the site's SSL status, choose Let's Encrypt, select File Verification and the required domains, then Apply. Confirm that the certificate is deployed and that both HTTPS addresses work with normal certificate validation.
Before you start
Create the website first.
1. Open the website SSL settings
Go to Website and click Not Set in the site's SSL column, or open the site's settings and select SSL. Choose the Let's Encrypt tab.
2. Choose File Verification and domains
Keep File Verification selected. Tick each hostname that should be included. In our lab, we selected both adminslab.com and www.adminslab.com.
![[Image: attachment.php?aid=16]](https://adminsforum.com/attachment.php?aid=16)
HTTP-01 file validation uses port 80 and requires the challenge file to be reachable. Wildcard certificates require a different validation method, such as DNS validation; they are not covered by this walkthrough.
3. Apply and wait
Click Apply once. Let aaPanel complete its initialization and certificate request. Do not repeatedly request new certificates while one is running. Read any error before retrying.
When successful, the certificate settings show Current Certs - Deployed, the covered domains and an expiry date.
![[Image: attachment.php?aid=17]](https://adminsforum.com/attachment.php?aid=17)
Our certificate covers both lab hostnames and expires on 8 January 2027. That date belongs to this test certificate; check the date shown for your own certificate.
4. Verify HTTPS
Open both addresses:
They should load without a certificate warning. Our tests returned HTTP 200 for both URLs, with certificate validation successful. Do not bypass warnings or disable certificate checks to call a deployment successful.
The default page test verifies HTTPS delivery, not an installed application or its mixed-content settings.
5. Plan renewal and redirects
aaPanel displays an automatic renewal reminder. We have verified issuance and deployment, not a future renewal. Keep the validation route available and check expiry and renewal logs before the certificate expires.
Issuing a certificate and redirecting HTTP to HTTPS are separate steps. This guide installs HTTPS; an HTTP-to-HTTPS redirect will be covered separately after checking the website. Cloudflare proxying and its SSL mode will also be separate.
Troubleshooting
Validation fails: Check public DNS, the selected hostnames, port 80 and the challenge path. Redirects, proxy rules or access restrictions can interfere.
Only one hostname works: Check that both are in the site's domain list and certificate.
Wrong certificate: Check the hostname, site selection and which server DNS points to.
HTTPS times out: Check port 443, Nginx and the provider firewall.
Rate-limit error: Read the error and avoid repeated requests while fixing DNS or routing.
Official reference
Let's Encrypt validation methods
Related
Add a domain to Cloudflare Free
Tested: 10 October 2026, aaPanel Free Edition 8.0.6, Nginx on Ubuntu 22.04. Original AdminsForum lab screenshots. Private keys are excluded from the screenshots.
Open Website in aaPanel Free Edition, select the site's SSL status, choose Let's Encrypt, select File Verification and the required domains, then Apply. Confirm that the certificate is deployed and that both HTTPS addresses work with normal certificate validation.
Before you start
- Create the website and include every hostname you want on the certificate.
- Point its DNS records to the VPS and confirm public DNS resolution.
- Check that the HTTP website works and port 80 is reachable for file validation.
- Allow port 443 for HTTPS.
Create the website first.
1. Open the website SSL settings
Go to Website and click Not Set in the site's SSL column, or open the site's settings and select SSL. Choose the Let's Encrypt tab.
2. Choose File Verification and domains
Keep File Verification selected. Tick each hostname that should be included. In our lab, we selected both adminslab.com and www.adminslab.com.
HTTP-01 file validation uses port 80 and requires the challenge file to be reachable. Wildcard certificates require a different validation method, such as DNS validation; they are not covered by this walkthrough.
3. Apply and wait
Click Apply once. Let aaPanel complete its initialization and certificate request. Do not repeatedly request new certificates while one is running. Read any error before retrying.
When successful, the certificate settings show Current Certs - Deployed, the covered domains and an expiry date.
Our certificate covers both lab hostnames and expires on 8 January 2027. That date belongs to this test certificate; check the date shown for your own certificate.
4. Verify HTTPS
Open both addresses:
Code:
https://adminslab.com
https://www.adminslab.comThe default page test verifies HTTPS delivery, not an installed application or its mixed-content settings.
5. Plan renewal and redirects
aaPanel displays an automatic renewal reminder. We have verified issuance and deployment, not a future renewal. Keep the validation route available and check expiry and renewal logs before the certificate expires.
Issuing a certificate and redirecting HTTP to HTTPS are separate steps. This guide installs HTTPS; an HTTP-to-HTTPS redirect will be covered separately after checking the website. Cloudflare proxying and its SSL mode will also be separate.
Troubleshooting
Validation fails: Check public DNS, the selected hostnames, port 80 and the challenge path. Redirects, proxy rules or access restrictions can interfere.
Only one hostname works: Check that both are in the site's domain list and certificate.
Wrong certificate: Check the hostname, site selection and which server DNS points to.
HTTPS times out: Check port 443, Nginx and the provider firewall.
Rate-limit error: Read the error and avoid repeated requests while fixing DNS or routing.
Official reference
Let's Encrypt validation methods
Related
Add a domain to Cloudflare Free
Tested: 10 October 2026, aaPanel Free Edition 8.0.6, Nginx on Ubuntu 22.04. Original AdminsForum lab screenshots. Private keys are excluded from the screenshots.