Install a Free SSL Certificate (and When You Need a Dedicated IP)

HTTPS encrypts traffic between visitors and your site. Browsers mark sites without it as "Not secure", and you need it for logins, forms, and payments.

On our shared hosting, certificates from Let's Encrypt are free and renew on their own. You don't need a dedicated IP: one IP serves many domains over HTTPS (SNI).

Before you start

The domain must point to us. Let's Encrypt checks the domain over the internet before it issues the certificate. If the domain's DNS still points to another server, the request fails. Check it with whatsmydns.net or see Manage DNS records. While you wait, build the site with temporary domain access.

Often it's automatic

Once the domain points to us, the server tries to issue a free certificate for it during the daily check. If https://yourdomain.com already shows a padlock, you're done; skip to Force HTTPS.

Issue a free certificate now

1. Open the hosting control panel from the client area.
2. In the side menu, open Hosting Features → Domains → Manage.
3. Click the shield icon next to the domain. The SSL Certificates page opens.
4. Click Generate All With Let's Encrypt.
5. Fill in the form:

Field	What to choose
Primary Domain	Your domain, for example yourdomain.com.
Additional Domains	Check www.yourdomain.com and any subdomain or pointer domain that should use the same certificate. www is a separate name; include it.
Email Address	Where Let's Encrypt sends notices.
Mode	Live. "Staging" creates a test certificate that browsers don't trust.

6. Click Generate and wait a moment.

Open https://yourdomain.com in a private window to check the padlock. Then force HTTPS so every visitor uses it.

Renewal: Let's Encrypt certificates last 90 days, and the server renews them on its own about 30 days before they expire. The domain must keep pointing to us for renewal to work.

If it fails

• "Domain doesn't resolve" or a validation error: the domain or www doesn't point to us yet. Uncheck the names that don't, or wait for DNS.
• Don't retry over and over. Let's Encrypt limits the attempts per week, including failed ones. Fix the cause first.
• You don't see the shield or the Let's Encrypt button: open a ticket with the domain.
• Another site appears over HTTPS: the certificate isn't installed yet. See Troubleshoot website errors.

Install a certificate you bought

If you bought a certificate (OV, EV, or wildcard) from another provider, install it from the same SSL Certificates page:

1. Setup Private Key: paste the private key you used to request the certificate and click Install.
2. Setup SSL Certificate: paste the certificate the provider sent (the .crt text, starting with -----BEGIN CERTIFICATE-----) and click Install.
3. Setup SSL Chain Certificate: paste the intermediate (CA bundle) the provider gave you and click Install.

Without the chain, some browsers and phones show a warning. If you need us to create the request (CSR) or you only have a .pfx file, open a ticket.

When a dedicated IP still helps

A dedicated IP (an address only your account uses) isn't needed for HTTPS, but it helps when:

• an application or partner requires IP-based allowlisting,
• you need a stable address for special DNS or mail setups we agree with you,
• support recommends it for a specific certificate or legacy system.

It's an add-on. Ask in a support ticket or Sales if you're unsure.