SSL Certificates

Free Let's Encrypt SSL on every hosting plan. When is free SSL enough, and when do you need a paid certificate? A short guide.

Order an SSL certificate

The padlock in the address bar means the connection between your visitor and your site is encrypted. Without it the browser shows a “not secure” warning, which is reason enough for a customer to close the page before filling in your form. Search engines also prefer https sites.

Free SSL: enough for most sites

Every site on our Linux hosting and Designer plans includes free Let’s Encrypt SSL. It is installed automatically and renews itself before it expires.

For a company website, a blog, or a site with a booking or contact form, free SSL is enough.

When do you need a paid certificate?

  • You want your organisation verified (OV/EV). The issuer checks that your company exists, and your company name appears in the certificate details.
  • A bank, payment provider or corporate client requires it.
  • You want one certificate for many subdomains (wildcard) and manage your sites on your own server.

Not sure which you need? Ask us before ordering. We won’t sell you a certificate you don’t need.

The padlock isn’t everything

SSL encrypts the connection; it doesn’t protect the site itself. An outdated WordPress plugin or a weak admin password can still get your site hacked, padlock or not. Keep plugins updated and use strong passwords and, where possible, two-factor authentication for admin accounts.

Frequently asked questions

Is free SSL less secure than paid SSL?
Not in terms of encryption: both use the same strength. The difference is how thoroughly the issuer verifies who you are, and the warranty and support some paid certificates include.
When does my certificate renew?
Let’s Encrypt certificates on our hosting plans renew automatically before they expire; you don’t need to do anything. Paid certificates usually renew yearly.
My site has SSL but the browser still says "not secure". Why?
Usually an image, font or script on the page still loads over http:// (“mixed content”). In WordPress, make sure the site address is set to https://. If you can’t solve it, write to us.
Is my e-mail protected too?
Yes. When your mail program connects to IMAP and SMTP with SSL/TLS, your password and messages travel encrypted. The settings on our e-mail setup page use it.

Order an SSL certificate

Kalfaoglu Assistant
Online