Free SSL · Let's Encrypt

Let’s Encrypt issues free SSL certificates valid for 90 days and is natively integrated into DirectAdmin. Renewal is automatic.

Prerequisites

• Domain with DNS pointing to the Rollin Host IP
• Wait for full DNS propagation (up to 1h)

Install

Force HTTPS

After installing SSL, redirect all HTTP traffic to HTTPS:

1. File Manager → public_html → .htaccess (create it if it does not exist)
2. Add at the top:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Automatic renewal

Rollin Host runs a daily cron that checks for certificates expiring in ≤30 days and renews them automatically. You do not need to do anything.

To check the expiration date:

echo | openssl s_client -connect seudominio.com.br:443 2>/dev/null | openssl x509 -noout -dates

Common errors

Error	Cause	Solution
Failed authorization procedure	DNS has not propagated	Wait up to 1h and try again
Too many failed authorizations	Let’s Encrypt limit exceeded	Wait 1h or use staging
unauthorized: Invalid response from...	Subdomain without DNS	Remove the subdomain from the selection
Certificate issued but the browser shows a warning	Old cache	Ctrl+F5, or wait 5 min

Wildcard SSL (*.seudominio.com.br)

Wildcard requires DNS-01 validation (TXT record). In DirectAdmin:

1. SSL Certificates → Use Wildcard
2. Follow the instructions to create the TXT record in DNS
3. Wait for propagation and click Validate

Next steps

• DirectAdmin · getting started
• Professional email · IMAP/SMTP