Get a Free SSL Certificate

The following Certificate Authorities provide free DV (Domain Validated) certificates.

  1. Let's Encrypt
  2. Cloudflare

Let's Encrypt is a free, automated and open Certificate Authority operated by Internet Security Research Group (ISRG). The free DV certificates from are valid for 90 days and can be renewed easily and recognized by all the major browsers such as Firefox, Chrome and Internet Explorer. Learn how to get a free certificate from Let's Encrypt at Getting started guide.

There are many web hosting providers who provide built-in support for the installation of a Let's Encrypt's certificate. Check out the list of hosting providers who support let's encrypt.

If your hosting provider does not support a Let's Encrypt certificate and you find it difficult to get a certificate manually using Certbot, then you can go to This website generates a free certificate using Let's Encrypt's ACME server by using domain validation. It is 100% safe to get a free certificate from Let's see how to get a free SSL certificate from

Create a Certificate on

Open in Google Chrome browser. It will display the web page as below.

Get a Free SSL Certificate from

In the text box, enter the fully qualified domain name of your website e.g.

Enter Website Name

Click on the Create Free SSL Certificate button. This will go to the validation page where you need to verify that you control the specified domain, as shown below.

Select Verification Method

Your domain can be validated in three ways: Automatic FTP Verification, Manual Verification by uploading verification file to your domain or Manual Verification by adding TXT records to your DNS server. Select a feasible method to validate your domain. For example, select the Manual Verification method where you need to upload verification files, as shown below.

Manual Verification

Once you selected the verification method, select the Manually Verify Domain button. This will display further information on how to download and upload verification files to your hosting server, as shown below.


After you successfully completed the verification process listed above, you can download the SSL certificate by clicking on the Download SSL Certificate button.

If you have a generated CSR from your web server, then select the I Have My Own CSR checkbox. This will display a textbox to copy and paste your CSR and then click on Download SSL Certificate button.

Enter CSR

This will generate the certificates and display the page shown below.

SSL Certificates

Scroll down to see your certificate, private key and CA bundle (root and intermediate certificates), as shown below.

Certificate, Private Key & CA Bundle

Click on the Download All SSL Certificate Files button to download a zip file which contains all the certificates. Unzip and you will see the following three files:

Certificate Files

As you can see above, your certificate and intermediate certificate are issued in .crt files and the private key in a .key file.

Once you get your certificate, you need to install it on your web server. The installation of an SSL certificate on the web server depends on the OS and the web server you are using. Before the installation, you need to understand the certificate formats and file extensions.

Learn how to buy an SSL certificate in the next chapter.