wk2 ssl

Question 1

cPanel (powered by Sectigo) has the following limits:

Answer 1

1

Can secure up to 1,000 domains per certificate (this means per virtual host).
2

AutoSSL will not renew certificates that contain wildcard domains.
3

AutoSSL will not issue certificates for websites on suspended accounts. The account must be activated in order for AutoSSL to issue a certificate.

Question 2

What does SNI stand for

Answer 2

SNI stands for Server Name Indication.

It allows SSL connections to use name-based virtual hosts, just like standard connections do.

Without SNI, only the IP address the client connected to is used to determine which virtual host to use.

Question 3

What port to test for secure POP and IMAP?

Answer 3

Similar to the procedure for web server troubleshooting, you can test secure POP (port 995) and IMAP (port 993) connectivity.

$ openssl s_client -connect example.com:995

$ openssl s_client -connect example.com:993