On 3 August 2017, we announced free Let’s Encrypt SSL certificates in our hosting plans. From company websites to online stores, every project needs to protect its connection with visitors.
SSL is still commonly used as the name for certificates, although modern HTTPS connections use TLS. Their purpose is to encrypt communication and let the browser verify the identity of the domain it connects to.
What is Let’s Encrypt?
Let’s Encrypt is a certificate authority operated by Internet Security Research Group (ISRG). It issues domain-validated certificates free of charge and uses automation to simplify their management.
Validation checks control of the domain. It does not certify a company’s business identity or guarantee that a page’s content is trustworthy: it confirms that the certificate belongs to the validated domain.
How issuance and renewal work
The server communicates with Let’s Encrypt through the ACME protocol. There are three main steps:
- Validate the domain. Demonstrate control through a supported check, such as an HTTP resource or DNS record.
- Obtain and install the certificate. Once validation succeeds, the server can provide an HTTPS connection.
- Renew the certificate. Automation repeats the checks and requests a new certificate when needed.
The official Let’s Encrypt documentation describes this process. Automation avoids relying on manual reminders for every renewal, provided the domain and validation checks keep working correctly.
What it brings to your project
Protection for data in transit. HTTPS helps prevent third parties from reading or modifying information as it travels between browser and server, including logins, forms and purchases.
Less certificate administration. Automated SSL is included in our hosting plans, without purchasing a separate certificate licence for that use.
A foundation for modern web technologies. HTTPS enables browser features that require a secure context and supports the use of HTTP/2.
What to check on your site
As well as having a certificate, the application needs to use HTTPS addresses and load its resources securely. If the domain points to another provider, there is an intermediary proxy or the browser shows a warning, our team can help review the configuration.
A certificate protects the connection; website security also requires updates, access controls and backups. For specific organisation-validation requirements or other products, see our SSL certificate options.
If you need to enable HTTPS or resolve a renewal problem, contact us with the domain and the warning you are seeing.