A free Let's Encrypt SSL certificate enables the padlock and https:// on your site.

1. Log in to cPanel.
2. Go to Security > SSL/TLS Status.
3. Tick your domain (and its www and mail subdomains).
4. Click Run AutoSSL.
5. Wait a few minutes — AutoSSL issues and installs a free certificate automatically.

Note: Most accounts have AutoSSL enabled, so a certificate is issued automatically when a domain is added. If your site still shows "not secure" after install, force HTTPS (article 141) and clear mixed content (article 143).