ERROR TLS Status: Defective 2026

Ok, so I had to reinstall the software on the server that I have had for a few years. The domain name and ip are still the same. I saw the old post in 2024, but it didn't fix these errors. My question is, why is this being done, because it never did before, and how to fix it?

Log for the AutoSSL run for “bellcumbie”: Tuesday, May 19, 2026 12:09:17 PM GMT-0700 (Let’s Encrypt™)

12:09:17 PM AutoSSL’s configured provider is “Let’s Encrypt™”.

Analyzing “bellcumbie”’s domains …

12:09:17 PM Analyzing “bellcumbie.org” (website) …

12:09:17 PM User-excluded domains: 9 (bellcumbie.org, www.bellcumbie.org, mail.bellcumbie.org, webmail.bellcumbie.org, cpanel.bellcumbie.org, autodiscover.bellcumbie.org, webdisk.bellcumbie.org, cpcontacts.bellcumbie.org, cpcalendars.bellcumbie.org)

ERROR TLS Status: Defective

Certificate expiry: 5/19/27, 5:03 PM UTC (364.91 days from now)

ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).

Impediment: COMPLETELY_EXCLUDED: All domains are excluded from AutoSSL.

12:09:17 PM SUCCESS This user’s SSL coverage is already optimal.Log for the AutoSSL run for “bellcumbie”: Tuesday, May 19, 2026 12:09:17 PM GMT-0700 (Let’s Encrypt™)
12:09:17 PM AutoSSL’s configured provider is “Let’s Encrypt™”.
Analyzing “bellcumbie”’s domains …
12:09:17 PM Analyzing “bellcumbie.org” (website) …
12:09:17 PM User-excluded domains: 9 (bellcumbie.org, www.bellcumbie.org, mail.bellcumbie.org, webmail.bellcumbie.org, cpanel.bellcumbie.org, autodiscover.bellcumbie.org, webdisk.bellcumbie.org, cpcontacts.bellcumbie.org, cpcalendars.bellcumbie.org)
ERROR TLS Status: Defective
Certificate expiry: 5/19/27, 5:03 PM UTC (364.91 days from now)
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).
Impediment: COMPLETELY_EXCLUDED: All domains are excluded from AutoSSL.
12:09:17 PM SUCCESS This user’s SSL coverage is already optimal.

Hi, AutoSSL is a feature of cPanel and is not affiliated with Let's Encrypt. Your server is currently using a default certificate created by the server itself, not from Let's Encrypt.

You should follow whatever currently guide there is for using cPanel AutoSSL to get your certificates setup again.

https://support.cpanel.net/hc/en-us/articles/360052304014-How-to-fix-Impediment-COMPLETELY-EXCLUDED-This-website-is-completely-excluded-from-AutoSSL

whats that mean?

ok found it. It worked. Had to access each account.