Fixing ServerFreak AutoSSL Certificate Renewal Failure

The AutoSSL DCV Pre-Validation Nightmare

ServerFreak provides excellent cPanel hosting in Malaysia, bundling free Sectigo or Let's Encrypt SSL certificates via AutoSSL. However, you might wake up to an email stating: AutoSSL certificate renewal failed.

The most common cause is a Domain Control Validation (DCV) failure. AutoSSL attempts to place a temporary text file in a hidden directory (.well-known/acme-challenge) to prove you own the domain. If the CA (Certificate Authority) cannot read this file over HTTP, the SSL issuance fails.

1. Diagnosing the DCV Failure

When you review the AutoSSL logs in WHM or cPanel, you will see an error similar to: Local HTTP DCV error: The system failed to fetch the DCV file at "http://yourdomain.com/.well-known/acme-challenge/..." (403 Forbidden or 404 Not Found).

This means something is blocking access to that directory.

2. Fixing Directory Permissions

First, ensure the directory exists and has the correct permissions. Connect via SSH or use the cPanel File Manager.

cd /home/username/public_html/
mkdir -p .well-known/acme-challenge
chmod 755 .well-known
chmod 755 .well-known/acme-challenge

3. The .htaccess Block

The most frequent culprit is a restrictive .htaccess file, often generated by security plugins (like iThemes Security or Wordfence) or forcing HTTPS redirects prematurely.

Open your .htaccess file in public_html and add this rule at the very top to bypass redirects and blocks for the .well-known directory:

RewriteEngine On
RewriteRule ^\.well-known - [L,NC]

If you have rules blocking hidden files (files starting with a dot), you need to exclude .well-known:

# Allow access to .well-known (for AutoSSL)
<IfModule mod_rewrite.c>
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
RewriteRule "(^|/)\.(?!well-known/)" - [F]
</IfModule>

Once applied, go back to cPanel > SSL/TLS Status and click Run AutoSSL. It should now succeed.

---

SSL failures cost you customers and SEO rankings. For clients like Daralwahi, we implement automated SSL lifecycle management that never fails. Stop dealing with manual certificate renewals.

Let JagaWeb audit your security architecture with our RM5,000 Ownership & Access Review, or put your site on autopilot with our RM450/month Care Plan.