We use cookies
We use cookies to optimize our website. By continuing to browse the site, you agree to our use of cookies.
Control panel
  • Русский
  • Українська
  • English
  • UAH
  • USD
  • RUB
  • EUR
  • 0-800-307-307 Hotline
  • +38 (044) 392-74-33 Kiev
  • +38 (057) 728-39-00 Kharkiv
  • +38 (056) 794-38-31 Dnipro
  • +38 (032) 229-58-93 Lviv
  • +38 (048) 738-57-70 Odessa
  • +38(093) 170-15-42  Life
  • +38 (067) 400-88-44 Kievstar
  • +1(888)393-24-51  USA, Toll free
  • +44(131)507-01-14  Great Britain
  • +7 (499) 348-28-61 Moscow

2.9.1.1. Free Let's Encrypt Certificate

Let's Encrypt - an automated certification authority providing free SSL certificates for websites. The goal of this project is to improve the level of security of sites everywhere, since the HTTPS protocol allows the transfer of data from the client to the server in an encrypted form, which makes it impossible for third parties to get this data.

Obtaining a certificate is fully automatic, but requires some basic knowledge of server administration. On our hosting installing a certificate is even more simplified and does not require any additional knowledge, you just need to submit a request to install a certificate.

In the process of installing the certificate, Let's Encrypt verifies and validates the domain name and site by sending a series of requests or using DNS-records. The process of issuing / revoking certificates is described in more detail at official website.

Content

Let's encrypt certificates have a number of differences from paid certificates:

  • Financial guarantee - Let's Encrypt is a non-profit company and does not provide any compensation in the event of a hacked certificate. Third-party companies generally provide some compensation in the event of problems with the security of their certificates.
  • Safety - Let's Encrypt certificates only have DV verification1), which checks only the domain name. Third-party CAs can issue certificates with additional levels of verification, such as OV SSL2) and EV SSL3)thus providing higher security and a special kind of certificate in the browser bar4).
  • Certificate validity period - SSL certificates from Let's Encrypt have a validity period of 90 days, after which it must be received again. Third-party companies provide certificates for a period of 1 year or more. (Our dashboard provides a short SSL validity period from Let's Encrypt and a new certificate is installed on the site before it expires, thereby ensuring that the current certificate is always available.)
  • Payment systems support - Let's Encrypt certificate uses SNI technology5)which allows you to install multiple certificates on one IP address. A large number of payment systems do not work with this technology, due to which it may not be possible to connect such payment systems on the site for making electronic payments.

Important points:

  • Automatic certificate installation is available only for sites on theusual and businesshosting.
  • The certificate installation request is processed automatically, usually it takes no more than an hour.
  • For subdomains of one domain, you can write out no more than 20 certificates per week.
  • The certificate is issued for 3 months and is automatically renewed if the conditions described below are met.
  • The ability to automatically install a certificate is not available for sites hosted on VPS, dedicated servers or hosted by other companies.
  • The certificate cannot be issued for subdomains with the symbol _ in the name.
  • If the site has added 10 or more subdomains (including www), only Wildcardcertificate.

Conditions for obtaining a certificate for a domain or subdomain:

If the site has aliasesto be included in the certificate, the same conditions must be met for them.

Conditions for receiving wildcardcertificate:

If the task is to obtain a wildcard certificate, before applying for installation, enable processing requests to non-existent subdomains.

To apply to install a certificate, do the following:

  1. Openup SSL settings.
  2. Click on the button to install the certificate:
    If the certificate is not installed, then on the “Free Let's Encrypt Certificate»Click«Set»:
    If you already have an installed certificate, but you need to issue a new certificate by Let's Encrypt, then click "issue only Let's Encrypt certificate»:
  3. If the site has aliases, indicate whether you want to include their addresses in the certificate:
    If there is only one alias:
    If there are several aliases:
    If a wildcard certificate is installed:
  4. Wait for the application to be completed: