As soon as you add a website, subdomain, or parked domain to your Web or Cloud hosting plan, an SSL is installed automatically for it. This process can require 1-2 hours to complete and for the SSL to appear as active.
If you check the SSL on your hPanel during that time, it may appear with a Failed status:
In that case, the certificate will try to reinstall automatically. If more than two hours have passed and the installation still appears as failed, there are a few things you can check in order to fix it:
Step 1 - Verify that Your Domain is Pointing to Hostinger
If the domain is not pointing to Hostinger or the propagation is still in progress, you will find a message indicating it in the same SSL section, along with a link to the following guide: How to Point your Domain to Hostinger.
Once your domain is pointing, the SSL will be correctly installed in 24 hours or less.
If you are using a CDN, such as Cloudflare, make sure to temporarily set the A record to DNS only while the SSL installation is completed. You can set it back to Proxied once Lifetime SSL is active.
Step 2 - Check for Conflicting or Missing Records
If your domain uses an A record (IPv4), and you do not require AAAA records (IPv6), go to your domain's DNS zone and look for any AAAA record.
Make sure your domain has all the required CAA records - you can check the values in the following guide: How to Manage CAA Records.
Step 3 - Reinstall the Certificate
Once you have completed the previous steps, retry the installation by clicking on the options button (⋮) → Reinstall:
If the domain is correctly set up, the SSL will be active in a few minutes after reinstalling. While HTTPS is forced by default, you can check it and force it manually if needed.