Search... ⌘ K
Get Started Contact Sales

How to Get a Free Let’s Encrypt SSL Certificate

Last updated

Table of Contents

DNSimple provides an SSL certificate interface you can use to get a free SSL certificate issued by Let’s Encrypt.

SSL certificates issued by Let’s Encrypt are valid for 90 days from the issue date. If you have selected auto-renewal for the certificate, DNSimple starts the renewal 30 days before the expiration date. Otherwise, DNSimple begins sending expiration notices at that point.

Before You Start

To order an SSL certificate, you need a DNSimple account. A subscription is necessary to order and renew the certificate, and the domain must be delegated to DNSimple’s name servers, because DNSimple completes the DNS challenge for you. Wildcard and multi-name certificates are only available on certain plans.

Note

It is not necessary to transfer registration to us, but the domain must be only delegated to our name servers.

For more details about the configuration, approval, and installation of the certificate, read the Getting Started with SSL Certificates article, or follow the instructions on the site after you submit the SSL certificate order.

Ordering a Let’s Encrypt SSL Certificate

Before purchasing an SSL certificate, read the Getting Started with SSL certificates article to make sure you are familiar with the SSL certificate process.

The order is the first step in getting an SSL certificate. It will create an SSL certificate order (for no charge, in the case of Let’s Encrypt certificates) that represents a request for a certificate to the CA.

Ordering a certificate
  1. Log into DNSimple with your user credentials.
  2. If you have more than one account, select the relevant one.
  3. If the domain is not already in your account, follow the instructions to add a domain for domain services, and add any records to it before delegating to our name servers.
  4. If the domain is already in your account, on the top-nav menu, click the tab, locate the relevant domain, and click on the name to access the domain page.
  5. Click , then click .
  6. On the page, click under Let’s Encrypt. Only domains that resolve with DNSimple can be selected.

  7. Configure the certificate details:

    1. Choose the names. What you can enter depends on your plan:
      • If your plan does not include custom names, the certificate covers the root domain and www, and there is nothing to enter.
      • If your plan includes custom names, type the subdomain in . A certificate for www also covers the root domain.
      • If your plan includes multiple names, type each subdomain in , leaving one blank for the root domain, and click for each extra name.

      To decide which names you need, see How to Choose SSL Certificate Names.

    2. Optionally, enter a to identify the certificate.
    3. Select if you want DNSimple to renew it 30 days before expiration, as recommended by Let’s Encrypt.
    4. Under , ECDSA is selected by default. Select RSA if your server requires it.
    5. Click .

Check out our pricing page to see which Let’s Encrypt options your plan includes. For how the free certificates work at DNSimple, see Let’s Encrypt: Free SSL Certificates with DNSimple.

Next Steps

Once you order the certificate, we will configure the necessary DNS records and check that they are resolving properly before having Let’s Encrypt check the DNS challenge. Once the challenge is verified, the certificate will be issued, and you can download and install the certificate on your server.

Tip

Due to the short expiration cycle of Let’s Encrypt certificates, it is recommended to automate as much of the installation process as possible. You can consult our developer documentation on SSL Certificates for more information on how to do this via our API.

Have more questions?

If you have any questions or need assistance, contact support, and we will be happy to help. You can also read more about SSL certificates at DNSimple.