How SSL Works on WP Stratos
WP Stratos issues SSL certificates through Let’s Encrypt, a free and widely trusted certificate authority. When you connect a domain and DNS propagation completes, the platform automatically requests a certificate for your domain and installs it, typically within a few minutes of your DNS resolving correctly. Certificates issued by Let’s Encrypt are valid for 90 days. WP Stratos handles renewal automatically in the background, well before each certificate expires. You never need to manually renew a certificate or worry about your site serving a security warning to visitors. HTTPS redirect is enabled by default on all WP Stratos sites, so any visitor who arrives onhttp:// is immediately sent to the secure https:// version.
Checking Your SSL Status
1
Log in to the Cloud Panel
Go to cloud.wpstratos.com and sign in to your account.
2
Open your site
From the main dashboard, click the site whose SSL status you want to check.
3
Check the domain's SSL status
Open the domain in question and look at its SSL status. A green indicator means the certificate is active and your site is serving HTTPS correctly. A pending or in-progress indicator means the certificate is still being issued, check back in a few minutes. A warning indicator means something needs attention.
SSL Not Activating?
If your domain shows a warning icon or HTTPS is not working after connecting your domain, one of the following is usually the cause.Domain hasn't propagated yet
Domain hasn't propagated yet
Let’s Encrypt must be able to reach your domain over the public internet to verify ownership and issue a certificate. If DNS changes are still propagating, certificate provisioning will not complete.Wait a few hours after updating your DNS records or nameservers before investigating further. You can check whether your domain is resolving to WP Stratos using a tool like whatsmydns.net.
Domain doesn't point to WP Stratos
Domain doesn't point to WP Stratos
The certificate can only be issued once your domain is actively pointing to your WP Stratos site. Verify the following:
- If you used Set Nameservers: confirm the exact nameserver pair shown in your Cloud Panel is what’s listed at your registrar. That pair is generated per domain, so double check you copied the current values rather than an old pair.
- If you used Set DNS Records: confirm your domain has the two A records and the
wwwCNAME shown in the Cloud Panel’s Set Your Domain window.
CAA records are blocking Let's Encrypt
CAA records are blocking Let's Encrypt
CAA (Certification Authority Authorization) records let domain owners specify which certificate authorities are allowed to issue certificates for their domain. If your domain has a CAA record that does not include Let’s Encrypt, certificate provisioning will fail.To allow Let’s Encrypt, add the following CAA record in your DNS settings:
If you manage DNS in the WP Stratos Cloud Panel, see DNS Configuration for instructions on adding records.
If you need to bring your own certificate, whether that’s an Extended Validation (EV) certificate or one issued by a specific authority your compliance team requires, WP Stratos supports it. Open Edit SSL for the domain in question and paste in your certificate (CRT), private key, and optional CA bundle. Most sites never need this. Let’s Encrypt covers the vast majority of use cases at no cost, and it’s what runs automatically unless you install something custom.
Next Steps
Connect a Domain
Add a custom domain to your site and confirm SSL is active once DNS propagation completes.
DNS Configuration
Add and manage DNS records, including CAA records, directly in the Cloud Panel.
Nameserver Setup
Switch to WP Stratos-managed nameservers to enable Cloud Panel DNS management.