Free SSL Certificate
Enter a domain, add a DNS validation record, and get a certificate issued by Let's Encrypt in minutes. Wildcards supported, no sign-up, nothing to install on your server.
FAQ
- Why DNS validation only?
- DNS validation only needs records added to your DNS. Your site doesn't need to be live, and CDNs or redirects don't get in the way. Wildcard certificates can only be validated this way.
- Which names does a wildcard certificate cover?
- *.example.com covers subdomains one level down, such as www.example.com and api.example.com, but not example.com itself, so example.com is added to the certificate by default. Uncheck it if you don't need it. It doesn't cover deeper names like a.b.example.com; request a wildcard for b.example.com if you need those.
- Is my private key safe?
- The private key is generated in your browser, stays on this device and is never uploaded. We only receive the domain names and public key needed to request the certificate. Without the private key, no one can use the certificate as you.
- How long is the certificate valid, and what happens when it expires?
- Currently 90 days; the exact expiry date is shown after issuance. Come back here to request a new one before it expires, or sign up for LapseZero to renew and deploy it automatically.
- How do I install it?
- In Nginx, point ssl_certificate to the full-chain certificate and ssl_certificate_key to the private key. In BT Panel or 1Panel, paste the certificate and key into the site's SSL settings. For IIS and Tomcat, pick the matching server type when downloading to get a PFX or JKS file directly.