How to Set Up Free Let’s Encrypt SSL in DirectAdmin: Complete Guide (2026)

by


⚡ Executive Summary & Key Takeaways

Zero-Cost Setup
  • Time to Install: Under 3 minutes directly from the DirectAdmin browser interface.
  • Certificate Authority: Free, automated Let’s Encrypt certificates with 2048/4096-bit RSA encryption.
  • Auto-Renewal: DirectAdmin runs an internal daily cron job that renews all active certificates automatically 30 days before expiration.
  • HTTPS Enforcement: A single toggle in Domain Management permanently redirects all non-secure HTTP requests to HTTPS.

🎯 Difficulty: Beginner / Intermediate
⚡ Est. Execution: 3 Mins
⏱️ 5 min read (1,050 words)

🔄 Verified September 2026 Edition

🐧 Target Environment: DirectAdmin 1.66+ • AlmaLinux 9 • Rocky Linux 9 • Ubuntu 24.04
🛡️ Reviewed by: Senior Linux Systems Architect
💡 Built-in Cost Savings:

Let’s Encrypt certificates provide the exact same military-grade 256-bit AES encryption as expensive commercial certificates. You never need to purchase basic SSL certificates for web hosting.


Zero Server Overhead

Prefer Automatic SSL Without Any Configuration?

Get instant web hosting on CpanelFree $0 Free Hosting. Automatic Let’s Encrypt SSL certificates are issued within 60 seconds of domain addition with zero manual steps.

2. Installing Free Let’s Encrypt SSL via DirectAdmin (3 Clicks)

DirectAdmin provides an intuitive graphical interface for automated certificate issuance. Follow these straightforward steps:

  1. Log in to DirectAdmin: Access your dashboard at https://your-server-ip:2222. If logged in as admin, click your username in the top right corner and switch to User View.
  2. Open SSL Certificates: In the navigation sidebar or dashboard grid, navigate to Account Manager > SSL Certificates.
  3. Select Let’s Encrypt: Choose the radio option: Free & automatic certificate from Let’s Encrypt.
  4. Select Domain Names: Ensure your primary domain (yourdomain.com) and www.yourdomain.com are checked. You can also include mail.yourdomain.com if hosting email mailboxes on this server.
  5. Click Save: Hit the green Save button at the bottom right.

DirectAdmin will automatically communicate with Let’s Encrypt, complete the challenge verification, save the certificate files to /home/username/.pki/, and seamlessly reload the web server daemon. Within 15–30 seconds, a confirmation banner will confirm: Certificate and Key Saved.

3. Forcing Automatic 301 HTTPS Redirection

Installing an SSL certificate enables encrypted traffic, but visitors typing your domain without https:// might still load the unencrypted HTTP version. You must enforce an automatic 301 redirect.

Method A: DirectAdmin 1-Click GUI Toggle (Recommended)

  1. Go to Account Manager > Domain Management.
  2. Click on your domain name.
  3. Check the box: “Force SSL with https redirect”.
  4. Ensure the option “Use a symbolic link from private_html to public_html” is enabled.
  5. Click Save.

Method B: Code-Level Redirection via .htaccess

If you prefer configuring redirects at the web server level, place this block at the very top of your public_html/.htaccess file:

APACHE / OPENLITESPEED (.HTACCESS)
301 PERMANENT REDIRECT 
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

4. Securing DirectAdmin Admin Panel & Port 2222

If you manage a dedicated server or VPS, logging into DirectAdmin at https://server.yourdomain.com:2222 often shows a browser warning because port 2222 initially uses a temporary self-signed certificate. You can secure the admin panel, mail server (Exim/Dovecot), and FTP with a valid Let’s Encrypt certificate in one command:

ROOT TERMINAL (SSH)
HOSTNAME CERTIFICATE ISSUANCE 
# Request Let's Encrypt certificate for the server FQDN hostname
/usr/local/directadmin/scripts/letsencrypt.sh request $(hostname -f) 4096

# Restart the DirectAdmin control daemon to apply changes
systemctl restart directadmin

5. Quick Diagnostics & Error Resolution Matrix

If certificate issuance encounters a snag, consult this troubleshooting matrix to resolve the issue in seconds:

Observed Symptom Root Cause Actionable Fix
Challenge Error: 404 An aggressive rewrite rule in .htaccess is blocking the token. Temporarily rename .htaccess to .htaccess.bak, click Save in SSL Certificates, then restore the file.
Blank Page on HTTPS DirectAdmin is serving HTTPS files from an empty private_html folder. In Domain Management, select “Use symbolic link from private_html to public_html”.
Certificate Failed Renewal DNS A-records changed or incoming port 80 was blocked by firewall. Verify TCP port 80 is open in UFW/Firewalld and click Save in SSL Certificates to force immediate renewal.

6. Frequently Asked Questions (FAQ)

Is Let’s Encrypt really free forever in DirectAdmin?
Yes. Let’s Encrypt is a non-profit certificate authority providing zero-cost, automated SSL/TLS certificates. DirectAdmin does not charge licensing fees for issuing or renewing Let’s Encrypt certificates.
Do DirectAdmin Let’s Encrypt certificates renew automatically?
Yes. DirectAdmin checks all installed certificates every night via an automated cron job (/etc/cron.daily/). It renews certificates automatically approximately 30 days before expiration with zero downtime.
Can I install a commercial SSL certificate (Sectigo, DigiCert)?
Yes. In Account Manager > SSL Certificates, choose “Paste a pre-generated certificate and key”. Paste your Private Key (.key) and Certificate (.crt), then click the SSL CA Root Certificate link to paste your Intermediate Bundle.

🔗 Recommended Related Technical Guides:

🚀 Production Cloud Infrastructure

Deploy on High-Performance Cloud VPS with MeraHost

Need dedicated vCPU, root SSH access, pure NVMe SSD speeds, and 99.95% uptime SLA for your production stack? Launch with MeraHost — guaranteed price lock with zero renewal hikes.

Deploy Cloud VPS on MeraHost →🇮🇳 India Managed VPS (from ₹1,799/mo)

Leave a Comment

Ready to launch your first website for free?

Join 150,000+ sites on cpanelfree. No credit card needed.

Start for Free Free Subdomain