How SSL Works on WP Stratos
WP Stratos issues SSL certificates through Let’s Encrypt, a free and widely trusted certificate authority. When you connect a domain and DNS propagation completes, the platform automatically requests a certificate for your domain and installs it — typically within a few minutes of your DNS resolving correctly. Certificates issued by Let’s Encrypt are valid for 90 days. WP Stratos handles renewal automatically in the background, well before each certificate expires. You never need to manually renew a certificate or worry about your site serving a security warning to visitors. HTTPS redirect is enabled by default on all WP Stratos sites, so any visitor who arrives onhttp:// is immediately sent to the secure https:// version.
Checking Your SSL Status
1
Log in to the Cloud Panel
Go to my.wpstratos.com and sign in to your account.
2
Open your site
From the main dashboard, click the site whose SSL status you want to check.
3
Navigate to Domains
In the left-hand sidebar, click Domains. Your connected domains are listed here.
4
Check the SSL column
Look at the SSL column in the domain list. A green padlock icon means the certificate is active and your site is serving HTTPS correctly. A yellow clock icon means the certificate is still being provisioned — check back in a few minutes. A red warning icon means there is a problem that needs attention.
SSL Not Activating?
If your domain shows a warning icon or HTTPS is not working after connecting your domain, one of the following is usually the cause.Domain hasn't propagated yet
Domain hasn't propagated yet
Let’s Encrypt must be able to reach your domain over the public internet to verify ownership and issue a certificate. If DNS changes are still propagating, certificate provisioning will not complete.Wait up to 48 hours after updating your DNS records or nameservers before investigating further. You can check whether your domain is resolving to WP Stratos using a tool like whatsmydns.net.
Domain doesn't point to WP Stratos
Domain doesn't point to WP Stratos
The certificate can only be issued once your domain is actively pointing to your WP Stratos site. Verify the following:
- If you’re using WP Stratos nameservers: confirm that
ns1.wpstratos.comandns2.wpstratos.comare listed as your domain’s nameservers at your registrar. - If you’re using external DNS: confirm that your domain has an A record pointing to your site’s IP address (visible in the Cloud Panel under Domains → Connection Details).
CAA records are blocking Let's Encrypt
CAA records are blocking Let's Encrypt
CAA (Certification Authority Authorization) records let domain owners specify which certificate authorities are allowed to issue certificates for their domain. If your domain has a CAA record that does not include Let’s Encrypt, certificate provisioning will fail.To allow Let’s Encrypt, add the following CAA record in your DNS settings:
If you manage DNS in the WP Stratos Cloud Panel, see DNS Configuration for instructions on adding records.
Custom SSL certificates (bring your own certificate) are not currently supported on WP Stratos. All sites use automatically provisioned Let’s Encrypt certificates. If you require a specific certificate type — such as an Extended Validation (EV) or wildcard certificate from a different authority — contact WP Stratos support to discuss your options.
Next Steps
Connect a Domain
Add a custom domain to your site and confirm SSL is active once DNS propagation completes.
DNS Configuration
Add and manage DNS records — including CAA records — directly in the Cloud Panel.
Nameserver Setup
Point your domain’s nameservers to WP Stratos to enable Cloud Panel DNS management.