- Short answer
- What an SSL certificate does
- Does SSL work in every browser?
- Why does my site need SSL?
- What is a CA?
- What is a CSR?
- Types of certificate
- How SSL works on your Simple Source plan
- Using a certificate you bought elsewhere
- Moving hosts or changing your certificate
- Do I need technical skills to set up SSL?
- FAQ
- Related
Short answer #
An SSL certificate lets a browser connect to your site over HTTPS and shows the lock icon. Every Simple Source hosting plan includes a free SSL certificate. It is requested automatically once your domain points at your hosting, and it renews automatically. Most sites do not need to buy one, and we do not sell paid certificates.
What an SSL certificate does #
- It encrypts the connection between a visitor’s browser and your site, so form entries and logins are not sent in plain text.
- It proves to the browser that the certificate was issued for your domain.
- Browsers show the lock when the certificate is valid for the address being visited. Without one, most browsers warn visitors that the site is not secure.
Does SSL work in every browser? #
In current major browsers, yes. The free certificate on your plan is trusted by current major browsers on desktop and mobile. Very old browsers and devices may not trust current certificates.
Why does my site need SSL? #
Browsers mark sites without HTTPS as “Not secure”. SSL also protects logins and form entries. With the free certificate on your plan, it costs nothing extra.
What is a CA? #
CA stands for certificate authority. A CA is the company that issues the SSL certificate. Browsers trust a set of CAs, and a certificate from one of them is accepted without a warning.
What is a CSR? #
CSR stands for Certificate Signing Request. It is a block of text made on the server from your site’s private key. You send it to the CA, and the CA uses it to make your certificate. With the free SSL on your plan, you never handle a CSR. The request is made for you.
Types of certificate #
| Type | What the CA checks | Who it suits |
|---|---|---|
| Domain validated (DV) | That you control the domain | Most sites. The free certificate on your plan is a DV certificate. |
| Organization validated (OV) | The domain plus your organization’s details | Organizations that want their name in the certificate details |
| Extended validation (EV) | A deeper check of the organization | Organizations with a policy that requires it |
All three types encrypt the connection the same way. The difference is how much the CA checked before issuing it.
The “green address bar”: browsers used to show a green bar or the company name for EV certificates. Current major browsers show the same lock for DV, OV and EV, so the green bar is no longer a reason to buy EV.
Does the brand of certificate matter? Not for encryption. A certificate from any trusted CA gives visitors the same lock. Brand matters only if a policy or a partner asks for a specific CA.
How SSL works on your Simple Source plan #
- Point your domain at your hosting. See Point your domain at Get Simple. DNS changes can take from a few minutes up to 24 to 48 hours.
- The free certificate is requested automatically once the domain points at your hosting. It can take a few minutes after DNS is correct. A temporary certificate may show until the free one is issued.
- The certificate covers both
yourdomain.comandwww.yourdomain.comwhen both point at your hosting. Check the lock in your browser on both. - The certificate renews automatically. You do not need to do anything to keep it.
If the lock is missing #
New to the panel? See How to open your control panel.
In your hosting panel, open Websites, select the site, open Advanced, then Security, and scroll to SSL certificates. Open the three-dot menu on the domain’s row and select Request Let’s Encrypt certificate. Once the lock shows, you can turn on Force HTTPS for the domain in the same table. Full steps: Get a free SSL certificate.
If the request fails #
- The domain’s A record (and www) must point at your hosting.
- Wait for DNS to finish updating, then request again.
- If you use a proxy or an extra CDN in front of the site, pause it until the certificate is issued.
Using a certificate you bought elsewhere #
We do not sell SSL certificates. If a policy or partner requires an OV or EV certificate, buy one from a certificate provider. Then install it in your hosting control panel:
- Open Websites and select the site.
- Open Advanced, then Security.
- Scroll to SSL certificates and select Install custom SSL.
- In Domain, choose the domain.
- In Certificate (CRT), paste the certificate your provider gave you, or select Upload file.
- In Private key, paste the private key, or select Upload file.
- Select Upload.
There is no separate field for a chain or CA bundle file. If your provider gave you one and you are not sure what to do with it, open a ticket.
Installing your own certificate replaces the free one. Shortly before your certificate expires, the panel requests a free certificate again, so the site keeps its lock. Renew or reinstall your paid certificate before it expires if you still need it.
What a CA asks for when you order a paid certificate #
- An email address at or for the domain, where the CA sends its approval request.
- For OV and EV, your organization’s legal name, address and phone number, which the CA checks against public records.
- A CSR for the domain.
The more the CA checks, the longer it takes to issue. A DV certificate is usually the quickest.
Moving hosts or changing your certificate #
- Moving to Simple Source: you do not need to bring your old certificate. Once your domain points at your new hosting, the free certificate is requested for you. If you also have a paid certificate from another host, its CA can usually reissue it for the new server with a new CSR.
- Upgrading a certificate: a CA cannot turn a DV certificate into an OV or EV one. You order the new type from a certificate provider and install it in place of the old one.
Do I need technical skills to set up SSL? #
No, not for the free certificate. It is requested and renewed for you. If the free certificate does not issue after DNS is correct, open a ticket with the domain and what you tried.
FAQ #
Is SSL included with my hosting plan? #
Yes. Every Starter, Simple and Business plan includes a free SSL certificate for your site. It renews automatically.
Does the certificate cover www? #
Yes. It covers both the bare domain and www when both point at your hosting.
How long does it take for the lock to show? #
The free certificate is requested once your domain points at your hosting, and it can take a few minutes after DNS is correct. DNS itself can take from a few minutes up to 24 to 48 hours.
Do I need to buy an SSL certificate? #
Most sites do not. The free certificate encrypts the connection the same way a paid one does. We do not sell paid certificates. If a policy or partner requires an OV or EV certificate, you can buy one from a certificate provider and install it in your hosting panel.
What is the difference between a CA and a CSR? #
A CA is the company that issues certificates. A CSR is the request your server sends to the CA so it can issue one for your domain.
