Sectigo SSL not renewing on cPanel / WHM

If you are getting this error it is because on October 2024 Sectigo was deprecated in cPanel version 11.118 and below and completely removed in 11.120.

If you are getting SSL errors and you have Sectigo installed, contact your web hosting provider and asked to switch to Let's Encrypt (100% free).

If you have access to WHM or the terminal, follow the next steps to upgrade to Let's Encrypt:

1. Open the Terminal and run the following command:

/scripts/install_lets_encrypt_autossl_provider

If you got an error like the following then we need to update the mirrorlist path: 

Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]

Error: Cannot find a valid baseurl for repo: appstream

2. To update the mirrorlist path run the follwoing commands: 

sed -i s/^mirrorlist=http/#mirrorlist=http/g /etc/yum.repos.d/CentOS-*.repo

sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/CentOS-*.repo

sed -i s/^#.*baseurl=http/baseurl=http/g /etc/yum.repos.d/CentOS-*.repo

sed -i  s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/CentOS-*.repo

3. Then try installing Let's Encypt again:

/scripts/install_lets_encrypt_autossl_provider

If everything goes well you will see how the different libraries are being downloaded and have the following message: 

Total                                           124 kB/s |  40 kB     00:00
Complete!
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'yum clean packages'.

4. Go to WHM -> Home -> SSL/TLS / Mange AutoSSL, and select Let’s Encrypt™ as the AutoSSL Provider

5. Agree to terms of service and check the box that says "Recreate my current registration with “Let’s Encrypt™”.". This will change all your domains to Let's Encrypt.

6. Finally Click on Run AutoSSL for All Users

Wait a few minutes and all your Domains should now have a new active SSL provided by Let's Encrypt.