Knowledgebase

Fixing SSL Errors in WordPress (Firstserv)

Overview

From time to time, WordPress websites using Let’s Encrypt SSL certificates may encounter issues when making secure HTTP requests. This can affect a range of WordPress functionality, including:

• WordPress core updates
• Plugin and theme updates
• Third-party integrations (e.g. APIs, payment gateways, image optimisation tools)
• Any feature that relies on WordPress’s HTTP API

Common Error Message

You may see an error similar to:

cURL error 60: SSL certificate problem: certificate has expired

This occurs when WordPress uses an outdated certificate bundle to verify secure connections.

How to Fix the Issue

Option 1: Update WordPress (Recommended)

In most cases, simply updating WordPress to the latest version will resolve the issue.

1. Log in to your WordPress dashboard
2. Navigate to Dashboard → Updates
3. Apply any available updates

If you cannot update through the dashboard, you can update or reinstall the WordPress core files via SSH or other tools.

✅ This is the preferred solution, as newer WordPress versions include updated certificate bundles.

Option 2: Manual Fix

If updating WordPress does not resolve the issue, you can manually replace the certificate bundle.

Step 1: Download the Latest Certificate Bundle

• Visit: https://curl.se/ca/cacert.pem
• Download the cacert.pem file to your computer

Step 2: Replace the Certificate File in WordPress

1. Log in to cPanel → File Manager
2. Navigate to your WordPress installation directory
3. Open the following path:

/wp-includes/certificates/ca-bundle.crt

1. Replace the contents of this file with the contents of the downloaded cacert.pem file
2. Save your changes

Step 3: Test the Fix

• Attempt to update a plugin or WordPress core
• Check if the error message has been resolved

✅ If successful, WordPress should now connect securely without SSL errors.

Summary

This issue is typically caused by an outdated SSL certificate bundle within WordPress. It can be resolved by:

• Updating WordPress to the latest version (recommended)
• Or manually replacing the certificate bundle if needed

If you need assistance applying this fix or updating your website, the Firstserv support team is always available to help.