My SSL certificate hasn't been generated. What should I do?

What normally happens

When you place a new order or add a domain to your account, the Let's Encrypt SSL certificate activates automatically one to two hours after the domain is registered or its DNS servers are pointed to our DNS servers. If your domain's servers are already correctly configured before it's added, the certificate is generated automatically at the time it's added.

In practical terms: as long as your domain doesn't "point" to our servers, Let's Encrypt validation cannot succeed, and the certificate stays pending. This is the most common cause of an ungenerated SSL certificate.

Manually triggering generation (and viewing errors)

If needed, you can trigger the process yourself and, if applicable, review any errors encountered (for example, if your domain doesn't yet point to our servers):

• Log in to your cPanel.
• In the Security section, choose AutoSSL.
• Click Run AutoSSL.
• Wait a few moments while AutoSSL generates your certificate.

If a domain fails, AutoSSL displays the reason next to it: this should be your first diagnostic step.

Using an external domain (managed elsewhere)?

If your domain name is managed with another provider (registrar or external DNS host) rather than on our DNS servers, two checks are required before AutoSSL can validate your certificate:

• The A record must point to your Hodi server's IP address. This is what allows Let's Encrypt to verify that the domain really belongs to you. A domain still pointing to a previous host cannot be validated.
• No leftover AAAA (IPv6) record should remain. An AAAA record pointing to an old IPv6 address causes validation to fail, even if your A record is correct: Let's Encrypt attempts IPv6 verification first and hits the wrong target. Remove any outdated AAAA record with your DNS manager, or point it to your Hodi server's IPv6 address.

After making the correction, allow time for DNS propagation (up to a few hours), then run AutoSSL again as described above.

What happens next?

AutoSSL also automatically renews your certificates before they expire: once the first certificate is generated, there's nothing more for you to do.
If the certificate still hasn't been generated after checking the A record, removing the AAAA record, and allowing DNS propagation, contact Hodi support: real humans will review the configuration with you.

Updated on: 17/07/2026