On Tommy, The default cpanel issued cert issuance secures cpanel, webmail and others, but not www. or the xyz.heliohost.org domain. I ended up generating a Let's Encrypt *.xyz.heliohost.org, xyz.heliohost.org cert. Kudos to having a strong crypto strength and consequently an A from ssllabs. Thank you HelieoHost team for putting together your talents and allowing us to use your services. I'll be sure to donate soon. Pat