Let’s Encrypt is a free, automated SSL certificate service operated by the Internet Security Research Group (ISRG). It enables websites to serve traffic over HTTPS without requiring a paid certificate.
On mybox, Let’s Encrypt certificates are issued and renewed automatically. No manual setup is required.
Table of Contents
How automatic issuance works
A certificate is generated for every domain correctly delegated to mybox nameservers:
- ns1.mybox.com
- ns2.mybox.com
Once a domain is delegated and parked in the mybox panel, the system detects it automatically and issues a certificate within a few minutes.
Why a certificate might not appear yet
The most common reason is DNS propagation. After updating nameservers, it can take up to 24 hours for changes to propagate fully. The certificate cannot be issued until the domain resolves correctly to mybox servers.
If generation fails for any reason, the system retries automatically. The error message displayed in the panel includes information about when the next attempt will be made.
→ Why hasn’t a Let’s Encrypt certificate been generated for my domain?
Cloudflare compatibility
Let’s Encrypt certificates issued by mybox are not compatible with Cloudflare proxy mode. If your domain is proxied through Cloudflare, the certificate cannot be generated or validated correctly. Contact Helpdesk 24 if you need guidance on your specific setup.
Managing SSL settings in the panel
SSL certificates for each domain can be managed in the mybox panel under Websites → SSL Certificate → Change SSL settings.
The available options are:
| Option | What it does |
| Disabled | Disables HTTPS encryption for the domain |
| Let’s Encrypt | Enables or re-enables the free certificate |
| Order a certificate | Places an order for a paid SSL certificate |
| Use an existing certificate | Activates a previously installed certificate |
A correctly generated certificate in the mybox panel should look like this:
About Let’s Encrypt certificates
Let’s Encrypt certificates are fully trusted by all major browsers and operating systems. They are renewed automatically before expiry - no manual action is needed.
They do not include an issuer guarantee (also called a warranty). This is standard for domain-validated (DV) certificates. If your use case requires an organization-validated (OV) or extended-validation (EV) certificate with an issuer guarantee, a paid certificate is available through the panel.
A note on SNI
mybox uses SNI (Server Name Indication) - a technology that allows multiple SSL certificates to be active on a single IP address. This is what makes it possible to issue free certificates to all hosted domains without requiring a dedicated IP for each one.