SSL Certificates in Enhance

Every website on TekLan hosting gets a free Let's Encrypt SSL certificate, provisioned automatically when you add a domain. This guide explains how SSL works in Enhance and what to do if something goes wrong.

How SSL Works in Enhance

When you add a website, Enhance requests a certificate from Let's Encrypt using an HTTP challenge. The certificate is installed and renewed automatically - you do not need to do anything manually for standard setups. Certificates last 90 days and Enhance renews them in the background before they expire.

Checking Certificate Status

1. Log in to web.teklanhosting.co.uk.
2. Click your website, then go to Security.
3. The SSL certificates section shows a table with each domain, its current status, certificate type, Force HTTPS toggle, and expiry date.

Forcing HTTPS

Once your certificate is active, you can redirect all HTTP traffic to HTTPS without editing .htaccess:

1. Go to Security → SSL certificates.
2. Toggle the Force HTTPS switch on for the domain.

Requesting a Let's Encrypt Certificate

If a certificate was not issued automatically, or you need to request one for a mail subdomain:

1. Go to Security → SSL certificates.
2. Click the three-dot menu next to the domain.
3. Select Request Let's Encrypt certificate for the website, or Request Let's Encrypt certificate for mail to cover the mail subdomain.

The request will fail if the domain's DNS has not yet propagated to this server. Use dnschecker.org to verify the A record is pointing to the correct IP first.

Viewing Certificate Details

To see the full certificate information (issuer, validity dates, SANs):

1. Click the three-dot menu next to the domain.
2. Select Certificate details.

Custom / Paid SSL Certificates

If you need a paid certificate (for example a wildcard or EV certificate), you can install it manually:

1. Go to Security → SSL certificates.
2. Click Install custom SSL (or the equivalent option for the domain).
3. Paste or upload your Certificate (CRT) and Private key from your certificate provider.
4. Save - Enhance installs it immediately.

Certificate Pending or Failed

If the certificate shows as Pending for more than 15 minutes or shows an error, the most common cause is the domain not yet resolving to this server. Check that:

• Your domain has an A record pointing to the correct TekLan server IP.
• DNS has fully propagated - use dnschecker.org to verify.
• There are no CAA DNS records blocking Let's Encrypt (the issuer is letsencrypt.org).

Once DNS is correct, use the three-dot menu to request a new certificate.