Short answer #
An SSL certificate lets a browser connect to your site over HTTPS and shows the lock icon. Every Simple Source hosting plan includes a free SSL certificate from Let’s Encrypt. It is requested automatically once your domain points at your hosting, and it renews automatically. Most sites never need to buy one, and we do not sell paid certificates.
What an SSL certificate does #
- It encrypts the connection between a visitor’s browser and your site, so form entries and logins are not sent in plain text.
- It proves to the browser that the certificate was issued for your domain.
- Browsers show the lock when the certificate is valid for the address being visited. Without one, most browsers warn visitors that the site is not secure.
What is a CA? #
CA stands for certificate authority. A CA is the company that issues the SSL certificate. Browsers trust a set of CAs, and a certificate from one of them is accepted without a warning.
What is a CSR? #
CSR stands for Certificate Signing Request. It is a block of text made on the server from your site’s private key. You send it to the CA, and the CA uses it to make your certificate. With the free SSL on your plan, you never handle a CSR. The request is made for you.
Types of certificate #
| Type | What the CA checks | Who it suits |
|---|---|---|
| Domain validated (DV) | That you control the domain | Most sites. The free Let’s Encrypt certificate on your plan is a DV certificate. |
| Organization validated (OV) | The domain plus your organization’s details | Organizations that want their name in the certificate details |
| Extended validation (EV) | A deeper check of the organization | Organizations with a policy that requires it |
All three types encrypt the connection the same way. The difference is how much the CA checked before issuing it.
The “green address bar”: browsers used to show a green bar or the company name for EV certificates. Current major browsers show the same lock for DV, OV and EV, so the green bar is no longer a reason to buy EV.
Does the brand of certificate matter? Not for encryption. A certificate from any trusted CA gives visitors the same lock. Brand matters only if a policy or a partner asks for a specific CA.
How SSL works on your Simple Source plan #
- Point your domain at your hosting. See Point your domain at Get Simple. DNS changes can take from a few minutes up to 24 to 48 hours.
- The free certificate is requested automatically once the domain points at your hosting. It can take a few minutes after DNS is correct. A temporary certificate may show until the free one is issued.
- The certificate covers both
yourdomain.comandwww.yourdomain.comwhen both point at your hosting. Check the lock in your browser on both. - The certificate renews automatically. You do not need to do anything to keep it.
If the lock is missing #
In your hosting panel, open Websites, select the site, open Advanced, then Security, and scroll to SSL certificates. Use the menu next to the domain and select Request Let’s Encrypt Certificate. Full steps: Get a free SSL certificate.
If the request fails #
- The domain’s A record (and www) must point at your hosting.
- Wait for DNS to finish updating, then request again.
- If you use a proxy or an extra CDN in front of the site, pause it until the certificate is issued.
Using a certificate you bought elsewhere #
We do not sell SSL certificates. If a policy or partner requires an OV or EV certificate, you can buy one from a certificate provider and install it from the SSL certificates list in your hosting panel, using the files your provider gives you. Most sites do not need this.
What a CA asks for when you order a paid certificate #
- An email address at or for the domain, where the CA sends its approval request.
- For OV and EV, your organization’s legal name, address and phone number, which the CA checks against public records.
- A CSR for the domain.
The more the CA checks, the longer it takes to issue. A DV certificate is usually the quickest.
Moving hosts or changing your certificate #
- Moving to Simple Source: you do not need to bring your old certificate. Once your domain points at your new hosting, the free certificate is requested for you. If you also have a paid certificate from another host, its CA can usually reissue it for the new server with a new CSR.
- Upgrading a certificate: a CA cannot turn a DV certificate into an OV or EV one. You order the new type from a certificate provider and install it in place of the old one.
Do I need technical skills to set up SSL? #
No, not for the free certificate. It is requested and renewed for you. If the free certificate does not issue after DNS is correct, open a ticket with the domain and what you tried.
FAQ #
Is SSL included with my hosting plan? #
Yes. Every Starter, Simple and Business plan includes a free Let’s Encrypt SSL certificate for your site. It renews automatically.
Does the certificate cover www? #
Yes. It covers both the bare domain and www when both point at your hosting.
How long does it take for the lock to show? #
The free certificate is requested once your domain points at your hosting, and it can take a few minutes after DNS is correct. DNS itself can take from a few minutes up to 24 to 48 hours.
Do I need to buy an SSL certificate? #
Most sites do not. The free certificate encrypts the connection the same way a paid one does. We do not sell paid certificates. If a policy or partner requires an OV or EV certificate, you can buy one from a certificate provider and install it in your hosting panel.
What is the difference between a CA and a CSR? #
A CA is the company that issues certificates. A CSR is the request your server sends to the CA so it can issue one for your domain.
