cPanel/WHM hostname SSL generation issue

If you get error such as below, follow the steps to solve it.

 

[root@server ~]# /usr/local/cpanel/bin/checkallsslcerts
The system will check for the certificate for the “cpanel” service.
The system will attempt to replace the self-signed certificate for the “cpanel” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “cpanel” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.
The system will attempt to install a certificate for the “cpanel” service from the cPanel store.
The system will check for the certificate for the “dovecot” service.
The system will attempt to replace the self-signed certificate for the “dovecot” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “dovecot” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “dovecot” service.
The system will check for the certificate for the “exim” service.
The system will attempt to replace the self-signed certificate for the “exim” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “exim” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
The system will check for the certificate for the “ftp” service.
The system will attempt to replace the self-signed certificate for the “ftp” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “ftp” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “ftp” service.
The cPanel Store is processing the hostname certificate request.
The system will check the cPanel Store again the next time that “/usr/local/cpanel/bin/checkallsslcerts” runs.
[root@server ~]#

 

Solution/Steps:

1) Add a DNS record for your hostname.

2) Allow in FIREWALL and IP’s: 53,80,443

IP list to whitelist:
https://support.cpanel.net/hc/en-us/articles/360053968633-What-IP-addresses-do-Sectigo-DCV-requests-originate-from
178.255.81.12
178.255.81.13
91.199.212.132
199.66.201.132
91.199.212.52
2a02:1788:400:1ce4::/64

3) Then follow this guide:
https://support.cpanel.net/hc/en-us/articles/9024670124951-Stale-hostname-CSRs-causes-the-cPanel-store-to-fail-creating-an-SSL-order-Round-2

Move the old CSR data aside with a command such as this:
mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v

 

Re-run checkallsslcerts for a new order with the following command:
/usr/local/cpanel/bin/checkallsslcerts –verbose –allow-retry

 

It should solve the issue and your hostname SSL should be generated now