CertSync
Wildcard SSL and external DNS that stay in sync on their own.
- Wildcard certificates via DNS-01 validation
- Two-way zone sync with Cloudflare and Route 53
- Per-account API tokens, never shared
- 30-day refund
- No per-account fees
- Installed same day
In this video
- What it does
- Install from WHM
- First configuration
- Daily use and alerts
Dashboard in WHM
Settings and presets
Customer view in cPanel
Alerts and reports
| cPanel & WHM | 11.110 or newer, tested on every release |
| Operating system | AlmaLinux 8/9, Rocky Linux 8/9, CloudLinux 8/9, Ubuntu 22.04 |
| Architecture | x86_64 |
| Resources | 512 MB free RAM, 200 MB free disk |
| Network | Outbound HTTPS to the license server |
| Specific to this plugin | |
| DNS providers | Cloudflare, Amazon Route 53 |
| API access | Zone-scoped token per account |
| Install path | /usr/local/cpanel/whostmgr/docroot/cgi/certsync |
- Route 53 hosted zone auto-discovery
- Fix: duplicate TXT records on retry
- Cloudflare proxied record handling
Sound familiar?
AutoSSL cannot issue wildcards
Subdomain-heavy customers end up with gaps.
DNS lives in two places
Cloudflare and cPanel drift apart after every change.
Expired certificates at 3 a.m.
A failed renewal is only noticed when the site breaks.
What it does for your servers
Issue wildcard certificates through DNS validation and keep external DNS zones in step with cPanel automatically.
Wildcard certificates via DNS-01 validation
Two-way zone sync with Cloudflare and Route 53
Per-account API tokens, never shared
Expiry alerts 21 days before renewal fails
Live in under 15 minutes
- 1Add your DNS provider
Cloudflare or Route 53, with a token per account.
- 2Issue the wildcard
DNS-01 validation runs automatically.
- 3Forget about it
Renewals and zone changes sync in the background.
What changes on day one
| Without it | With it | |
|---|---|---|
| Wildcard certificates | Not available | Issued by DNS-01 |
| DNS records | Edited in two panels | One source, synced both ways |
| Renewal failures | Found when the site breaks | Alert 21 days earlier |
Pick your license
An engineer installs, configures and tests it over SSH, usually the same business day.
All six plugins from $149 a year, with free installation on one server on Pro.
Questions before you buy.
Does it replace AutoSSL?
No. It adds wildcard and external DNS support and falls back to AutoSSL for everything else.
Are my customers' API tokens shared?
Never. Each account stores its own token, encrypted, and it is only used for that account's zones.
Which cPanel & WHM versions are supported?
cPanel & WHM 11.110 and newer on AlmaLinux 8/9, Rocky Linux 8/9, CloudLinux 8/9 and Ubuntu 22.04. We test every new cPanel release.
How is the license counted?
Per server IP. There are no per-account or per-customer fees, so your costs do not grow when you sell more hosting.
What if the plugin does not fit my setup?
Ask for a refund within 30 days and we return the full amount, no questions asked.
Related plugins
BackupVault
Per-account backups to S3, Backblaze B2 and Wasabi
MailGuard
Outbound spam limiter and sender reputation dashboard
WP Shield
One-click WordPress hardening and safe auto-updates
Put your server on autopilot this week.
Try any plugin for 30 days. If it does not fit your stack, you get your money back.