Trustico® CaaS cPanel Plugin

The Trustico® CaaS cPanel plugin brings automated SSL Certificate management directly into the cPanel control panel. Website owners can retrieve, install, and automatically reissue commercial SSL Certificates without leaving the cPanel dashboard - no command line, no manual file uploads, and no expiry anxiety.

Free SSL Certificates provide basic encryption, but commercial SSL Certificates from Trustico® deliver the trust signals, validation, and warranty protection that businesses rely on. Discover Commercial SSL Certificate Advantages 🔗

Ready to Install? Server administrators can download and install the plugin on their servers. View Our Installation Guide 🔗

Plugin Features

The Trustico® CaaS cPanel plugin automates the entire SSL Certificate lifecycle. It retrieves a signed SSL Certificate from the Certificate Authority (CA), installs it along with the Private Key and Certificate Authority (CA) bundle into cPanel, and configures automatic reissue.

All of this happens through a simple form inside the cPanel dashboard. The plugin supports both Trustico® branded and Sectigo branded SSL Certificates, including Domain Validation (DV) products.

Single site and Wildcard SSL Certificates are both supported, with the plugin handling the appropriate validation method automatically. Explore Traditional vs CaaS SSL Certificates 🔗

Plugin Workflow

The plugin uses the Automatic Certificate Management Environment (ACME) protocol with External Account Binding (EAB) to connect your Trustico® SSL Certificate order to your cPanel hosting environment.

When you purchase a CaaS-enabled SSL Certificate from Trustico® you receive two credentials : an EAB Key ID and an EAB HMAC Key. These are the only values you need to enter into the plugin.

Plugin Guide Plugin Installation

Open the plugin from the "Security" section in your cPanel dashboard, select your virtual host, and choose which domain names to include on your SSL Certificate. Enter your EAB credentials and click "Retrieve SSL Certificate."

The plugin handles domain validation, SSL Certificate retrieval, installation, and automatic reissue configuration. You can close the page during processing and return later to check the result. View Our Plugin Guide 🔗

Background Operations

The plugin verifies that your domain's document root is accessible, registers with the ACME server using your EAB credentials, and performs domain validation. HTTP-01 is used for standard domains and DNS-01 for Wildcard SSL Certificates.

Once validated, the plugin retrieves the signed SSL Certificate and installs it into cPanel. Your domain immediately begins serving HTTPS.

The plugin then configures automatic reissue. When the SSL Certificate approaches its expiry window, it is automatically reissued and reinstalled without any action on your part.

This is particularly important as the industry moves towards shorter SSL Certificate validity periods, with maximum validity decreasing to 200 days from March 2026 and eventually to just 47 days.

SSL Certificate Coverage

The plugin displays your SSL Certificate coverage organized into three sections. The Virtual Host table shows the currently installed SSL Certificate. The Website Domains table shows the domain names your visitors use. The Service Domains table shows cPanel service subdomains such as webmail and webdisk.

Each domain name is checked against the installed SSL Certificate's Subject Alternative Names (SANs) to determine whether it is covered.

Color-coded status labels make it easy to see which domain names are secured at a glance. Domains covered show "Active" in green, while domains not covered show "Inactive" in gray.

Additional labels indicate when an SSL Certificate is approaching expiry or has already expired. View Our Plugin Guide 🔗

Wildcard SSL Certificate Support

Wildcard SSL Certificates allow you to secure all subdomains under a single domain - such as www.example.com, mail.example.com, and shop.example.com - with a single SSL Certificate.

It is important to understand that a Wildcard SSL Certificate secures every first-level subdomain beneath the wildcard entry, and the root domain is included automatically at no additional cost.

The base domain is carried as its own Subject Alternative Name (SAN) on the same SSL Certificate : that is how the automatic inclusion works.

Trustico® bundles both together when you purchase a Wildcard SSL Certificate, so your licensed domain names authorize issuance for both *.example.com and example.com.

The plugin fully supports Wildcard SSL Certificates and handles DNS-01 validation automatically. When you select a Wildcard domain name, the validation method switches to DNS-01.

The plugin manages the required Domain Name System (DNS) TXT records through cPanel. Learn About Wildcard SSL Certificates 🔗

Important : Wildcard SSL Certificate support using DNS-01 validation requires that the Domain Name System (DNS) zone for your domain is managed by the same cPanel server. If your domain uses external providers such as Cloudflare or Amazon Route 53, the plugin will detect this and display an error message.

Security Throughout

The plugin has been designed with security as a priority throughout. EAB credentials are passed via environment variables rather than command-line arguments and are cleared from memory after use.

All operations are protected by Cross-Site Request Forgery (CSRF) validation using cPanel session tokens. A five-minute cooldown between operations per domain prevents overuse of Certificate Authority (CA) rate limits.

Logs displayed through the "Show Details" view are sanitized to remove server paths, IP addresses, and credential values. Server-side error logs use Coordinated Universal Time (UTC) timestamps with automatic rotation and restricted file permissions.

The plugin runs entirely with cPanel user permissions - no root access is required or used.

Server Administrator Guide

The Trustico® CaaS cPanel plugin is designed for easy deployment. Whether you are a hosting company, a reseller, or managing your own dedicated server, a single installation makes the plugin available to every cPanel user.

The plugin appears under the "Security" section in the cPanel dashboard and requires PHP 7.4 or later with Secure Shell (SSH) root access for the initial installation only.

For detailed installation instructions, server requirements, and feature management options, refer to our installation guide. View Our Installation Guide 🔗

Tip : Hosting companies and server administrators interested in offering Trustico® SSL Certificates to their customers can explore our partner service for volume pricing. Explore The Trustico® Partner Service 🔗

Obtaining Your EAB Credentials

To use the Trustico® CaaS cPanel plugin, you need an active Trustico® SSL Certificate order that supports Certificate as a Service (CaaS).

When you purchase a qualifying SSL Certificate, your order includes the EAB Key ID and EAB HMAC Key credentials required by the plugin. You can find your credentials in your order confirmation e-mail. Discover How to Obtain Your CaaS Credentials 🔗

Ready to Install? Server administrators can download and install the plugin on their servers. View Our Installation Guide 🔗

Getting Started

If you are a website owner, check whether the Trustico® CaaS cPanel plugin is installed on your server. If it is, navigate to "Security" in your cPanel dashboard and click "Trustico® SSL Certificates" to open the plugin.

For a detailed step-by-step walkthrough covering every feature, troubleshooting guidance, and frequently asked questions, refer to our comprehensive guide. View Our Plugin Guide 🔗

Plugin Guide Plugin Installation

If the plugin is not yet installed, you can direct your server administrator to the installation guide. If you manage your own cPanel server, the installation requires only a single script run as root via Secure Shell (SSH). Learn About Certificate as a Service (CaaS) 🔗

Other Ways to Use Your Certificate as a Service (CaaS) License

The cPanel plugin is the simplest option for websites hosted on cPanel, but it is not the only way to use your Certificate as a Service (CaaS) license. The same license and the same External Account Binding (EAB) credentials work with every supported method, so you are never tied to a single one and can use whatever suits each server at any point during your license period. Learn About Automating SSL Certificates on Google Cloud 🔗

On servers without cPanel, a standalone Automatic Certificate Management Environment (ACME) client such as Certbot, acme.sh, or win-acme automates issuance and reissue directly. Discover Supported ACME Clients 🔗

For equipment that cannot run a client at all, the hosted Certificate as a Service (CaaS) Issuance Tool produces an SSL Certificate in a browser, with nothing to install. Learn About the Hosted Issuance Tool 🔗

Your license places no limit on how often SSL Certificates are issued for your licensed domain names throughout the license period, and more than one method can be active at the same time. The cPanel plugin can secure your hosting account while an ACME client or the hosted Issuance Tool covers other servers and devices, all against the same license.

Choose From Our CaaS Products

Choose from our range of SSL Certificate products compatible with Trustico® Certificate as a Service (CaaS).

Certificate as a Service (CaaS) - Pricing

Trustico® Certificate as a Service (CaaS) provides automated SSL Certificate issuance through the Automated Certificate Management Environment (ACME) protocol. The table below shows the price for each Certificate as a Service (CaaS) product.

Product Name Supplier List Price Your Price
Trustico® CaaS DV Single Site 🔗
€101,95 EUR
€54,95 EUR Save 46%
Trustico® CaaS DV + Wildcard 🔗
€506,95 EUR
€217,95 EUR Save 57%
Trustico® CaaS DV + Multi Domain 🔗
€101,48 EUR
€54,48 EUR Save 46%
Trustico® CaaS DV + Wildcard + Multi Domain 🔗
€506,48 EUR
€217,48 EUR Save 57%
Trustico® CaaS OV Single Site 🔗
€202,95 EUR
€108,95 EUR Save 46%
Trustico® CaaS OV + Wildcard 🔗
€891,95 EUR
€434,95 EUR Save 51%
Trustico® CaaS OV + Multi Domain 🔗
€202,98 EUR
€108,98 EUR Save 46%
Trustico® CaaS OV + Wildcard + Multi Domain 🔗
€891,48 EUR
€434,98 EUR Save 51%
Sectigo® CaaS DV Single Site 🔗
€92,95 EUR
€63,95 EUR Save 31%
Sectigo® CaaS DV + Wildcard 🔗
€460,95 EUR
€254,95 EUR Save 45%
Sectigo® CaaS DV + Multi Domain 🔗
€92,32 EUR
€63,65 EUR Save 31%
Sectigo® CaaS DV + Wildcard + Multi Domain 🔗
€460,65 EUR
€254,32 EUR Save 45%
Sectigo® CaaS OV Single Site 🔗
€184,95 EUR
€127,95 EUR Save 31%
Sectigo® CaaS OV + Wildcard 🔗
€810,95 EUR
€508,95 EUR Save 37%
Sectigo® CaaS OV + Multi Domain 🔗
€184,32 EUR
€127,32 EUR Save 31%
Sectigo® CaaS OV + Wildcard + Multi Domain 🔗
€810,32 EUR
€508,32 EUR Save 37%

*Multi-Domain SSL Certificate pricing is displayed per Subject Alternative Name (SAN). Each Multi-Domain product has its own minimum number of Subject Alternative Names (SANs) that are included or required to be purchased, and this minimum differs between products.

Sectigo® CaaS DV Single Site vs Wildcard Comparison

Certificate as a Service (CaaS) provides automated SSL Certificate management through APIs. Choose Single Site for individual domain automation, or Wildcard for comprehensive subdomain coverage with full API-driven SSL Certificate lifecycle management.

Feature Sectigo® CaaS DV Single Site Sectigo® CaaS DV + Wildcard
Service Type Certificate as a Service (CaaS) Certificate as a Service (CaaS)
Coverage Single Domain Only Unlimited Subdomains
Domains Covered www.example.com + example.com *.example.com + example.com
Automation Level Fully Automated Fully Automated
API Access Full RESTful API Full RESTful API
Validation Level Domain Validation (DV) Domain Validation (DV)
Validation Methods E-Mail / DNS / HTTP / HTTPS E-Mail / DNS / HTTP / HTTPS
Issuance Time Very Fast! Issued Within Minutes Very Fast! Issued Within Minutes
Auto-Renewal Automated Renewal Available Automated Renewal Available
Certificate Management Centralized Dashboard Centralized Dashboard
Integration Options API, Webhooks, SDK API, Webhooks, SDK
Ideal For SaaS Platforms, Single Domain Apps Multi-Tenant SaaS, Complex Infrastructures
Scalability Per-Domain Scaling Automatic Subdomain Coverage
Warranty $500,000 USD $500,000 USD
Encryption Strength 256-bit SSL Encryption 256-bit SSL Encryption
Browser Compatibility 99.9% Browser Trust 99.9% Browser Trust
Dual Domain Coverage Includes Root Domain SAN Free! Includes Root Domain SAN Free!
Reissues Unlimited Unlimited
Deployment Options Cloud, On-Premise, Hybrid Cloud, On-Premise, Hybrid
Information Page Product Information Page 🔗 Product Information Page 🔗
Your Trustico® Price €63,95 EUR €254,95 EUR
Purchase Options Instant - Buy Now 🔗 Instant - Buy Now 🔗

Most Popular Questions

Learn about the Trustico® Certificate as a Service (CaaS) cPanel plugin, which automates the entire SSL Certificate lifecycle within the cPanel dashboard. This page covers step-by-step usage for website owners, the three-section SSL Certificate coverage display (Virtual Host, Website Domains, and Service Domains), Wildcard SSL Certificate support with automatic DNS-01 validation switching, security features, and installation instructions for server administrators.

What Does the Trustico® CaaS cPanel Plugin Provide?

The plugin automates the entire SSL Certificate lifecycle within the cPanel dashboard. It retrieves a signed SSL Certificate from the Certificate Authority (CA), installs it along with the Private Key and CA bundle into cPanel, and configures automatic reissue so the SSL Certificate is reissued before it expires.

Retrieving SSL Certificates with the Plugin

Navigate to the "Security" section in your cPanel dashboard, click Trustico® SSL Certificates, select your virtual host from the dropdown, check the domain names you want to include in the Website Domains table, select your SSL Certificate type, enter your External Account Binding (EAB) Key ID and EAB HMAC Key, and click Retrieve SSL Certificate. The plugin handles domain validation, retrieval, installation, and automatic reissue configuration.

Virtual Host Explained

A virtual host is the primary hosted domain on your cPanel account. When you select a virtual host from the dropdown, three sections appear showing the current SSL Certificate coverage : the Virtual Host table, the Website Domains table, and the Service Domains table.

Website Domains Compared with Service Domains

Website Domains are the domain names your visitors use to access your website, such as the root domain, the www version, and the mail subdomain. Service Domains are cPanel service subdomains such as cpanel, webmail, and webdisk. Service Domains are automatically secured when your SSL Certificate includes them through a Wildcard Subject Alternative Name (SAN) or an explicit domain name.

Locating Your EAB Credentials

Your External Account Binding (EAB) Key ID and EAB HMAC Key are included with your Trustico® SSL Certificate order. You can find them in your order confirmation e-mail. These are the only credentials you need to use the plugin.

SSL Certificate Status Labels Explained

Six color-coded labels indicate the coverage status. Active (green) means the domain is covered by the Subject Alternative Names (SANs) in the installed SSL Certificate with more than 30 days remaining. Renew Soon (amber) means seven to 29 days remaining. Expiring (red) means within seven days of expiry. Expired (red) means the SSL Certificate has expired. Inactive (gray) means the domain is not covered by the SANs in the installed SSL Certificate. No SSL (amber) means no SSL Certificate is installed on the virtual host.

SSL Certificate Coverage Detection

The plugin checks each domain name against the Subject Alternative Names (SANs) in the installed SSL Certificate using the same method cPanel uses on its own SSL/TLS Status page. A domain showing Active means the SANs in the SSL Certificate include that domain name. A domain showing Inactive means the SSL Certificate does not cover it.

Server Requirements

The plugin has been fully tested on Ubuntu 24.04 LTS with cPanel 134.0 and PHP 8.4 using the Jupiter theme. The plugin requires a cPanel server with PHP 7.4 or later and supports alternative themes via the --theme flag. Depending on individual server customization, functionality may differ across platforms and require minor adjustments. Secure Shell (SSH) root access is required for installation only. No additional PHP extensions or server modifications are needed.

Plugin Installation Process

Installation is a one-time operation performed via Secure Shell (SSH) as root. The installation script downloads and verifies the Automatic Certificate Management Environment (ACME) client using SHA-256 checksum verification, copies the plugin files into the cPanel theme directory, registers the plugin with the cPanel Feature Manager, and rebuilds the icon sprites.

Does the Plugin Support Wildcard SSL Certificates?

Yes. The plugin fully supports Wildcard SSL Certificates using DNS-01 validation. When a Wildcard domain name is checked in the Website Domains table, the Validation Method automatically switches to DNS-01 and the dropdown is locked. The Domain Name System (DNS) zone for the domain must be managed by the same cPanel server.

Plugin Security Features

External Account Binding (EAB) credentials are passed via environment variables and cleared from memory after use. All operations are protected by Cross-Site Request Forgery (CSRF) validation using cPanel session tokens. A five-minute cooldown prevents overuse of Certificate Authority (CA) rate limits. Logs are sanitized to remove sensitive information, and the plugin runs entirely with cPanel user permissions.

Uninstalling Without Losing SSL Certificates

Installed SSL Certificates are not removed during uninstallation and continue to protect websites until they expire. Per-user SSL Certificate files and configuration are also preserved. However, automatic reissue will stop because the shared Automatic Certificate Management Environment (ACME) client is removed with the plugin. Reinstalling the plugin restores automatic reissue immediately.