many of the SSL certificates need to check the website before renew, and there is some problem happen in this case due to the .htaccess files rules
to solve this problem do the following
For cPanel’s internal DCV checks:
RewriteCond %{REQUEST_URI} !^/[0-9]+\..+\.cpaneldcv$
For Comodo:
RewriteCond %{REQUEST_URI} !^/[A-F0-9]{32}\.txt$
For Let’s Encrypt:
RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
Insert these lines before every “RewriteRule” directive to ensure that domain control validation (DCV) will avoid redirects. Only the Comodo one should be strictly necessary, but the others are good ideas just in case.