How to Set Up Multi-Domain & Wildcard SSL on CyberPanel OpenLiteSpeed (2026)

When managing multiple client websites, development staging subdomains, or multi-tenant SaaS applications on a single cloud VPS, securing every endpoint with cryptographic HTTPS encryption is vital. While CyberPanel offers automated Let’s Encrypt certificate issuance, configuring complex multi-domain environments (Subject Alternative Names) or multi-level Wildcard certificates (*.yourdomain.com) often results in ACME challenge failures if DNS validation is misconfigured.

In this technical 2026 tutorial, we walk through issuing both free automated Let's Encrypt Wildcard certificates using DNS API tokens and installing commercial high-warranty certificates (via SSLs.com) on OpenLiteSpeed and CyberPanel to guarantee zero browser security warnings and seamless auto-renewals.

1. Single-Domain vs. Wildcard vs. Multi-Domain SSL

2. Method 1: Issuing Automated Wildcard SSL (DNS-01 Challenge)

Because Let’s Encrypt cannot verify ownership of unlimited subdomains via standard HTTP web requests, Wildcard SSL requires DNS-01 token verification:

1. In CyberPanel, navigate to SSL > Manage SSL.
2. Select your target website from the dropdown.
3. If using Cloudflare for DNS management:
   • Go to CyberPanel > Cloudflare DNS.
   • Enter your Cloudflare Email and Global API Key / API Token.
   • CyberPanel will automatically create the temporary _acme-challenge TXT records in your DNS to validate the Wildcard certificate.
4. Click Issue SSL. The system will generate a certificate valid for both yourdomain.com and *.yourdomain.com.

3. Method 2: Installing Commercial SSL Certificates (SSLs.com)

For financial applications, e-commerce stores, or enterprise client portals requiring multi-year validity and warranty guarantees:

1. Purchase your certificate on SSLs.com (PositiveSSL or Sectigo Wildcard).
2. In CyberPanel, open Websites > List Websites > Manage > Add SSL.
3. Paste your generated Private Key (.key) in Box 1.
4. Paste your Certificate (.crt) and CA Bundle in Box 2.
5. Click Save SSL. OpenLiteSpeed will automatically restart its listener daemon and begin serving the commercial certificate immediately.

4. Troubleshooting Common CyberPanel SSL Failures

• Issue 1: Self-Signed Certificate Fallback: If Let's Encrypt fails, CyberPanel defaults to a self-signed certificate, causing browser security warnings. Check that port 80 is not blocked by your hosting firewall (Kamatera VPS or Cloudflare).
• Issue 2: Force HTTPS Redirection: In your website configuration, open vHost Conf and ensure the HTTPS rewrite rule is active:

  rewrite {
    enable 1
    autoLoadHtaccess 1
  }

• Issue 3: Certificate Auto-Renewal Cron Job: CyberPanel runs an automated cron job located at /root/.acme.sh/acme.sh --cron every day to renew certificates expiring within 30 days.

Summary: Multi-Domain SSL Checklist

• Use automated DNS API integration for seamless Wildcard SSL verification.
• Deploy high-warranty commercial certificates from SSLs.com for corporate payment gateways.
• Ensure Port 80 and Port 443 are open in your Linux firewall.
• Verify HTTPS redirection using SSL Shopper or Qualys SSL Labs.