An SSL certificate encrypts the connection between your website and your visitors. It gives your website the padlock and the https:// address that browsers expect. Without one, browsers warn visitors that your site is "Not secure".

Every PaduHost plan includes free SSL certificates from Let's Encrypt.

Getting a certificate

DirectAdmin usually issues a certificate automatically once your domain points to PaduHost. If your website still shows a security warning, check that automatic certificates are switched on:

1. Make sure your domain points to PaduHost. See Pointing your domain to PaduHost.
2. Log in to DirectAdmin.
3. Go to Account Manager and click SSL/TLS Certificates.
4. If you have more than one domain, choose the domain.
5. Open the ACME settings tab.
6. Tick Enable ACME if it isn't ticked already. Leave ACME provider on Default (Let's Encrypt).
7. Click Save Changes.

The certificate is usually ready within a few minutes. The Provisioning history tab shows each attempt and its result.

Renewal

Let's Encrypt certificates are valid for a short period and renew automatically before they expire. You don't need to do anything, as long as your domain keeps pointing to PaduHost.

If the certificate can't be issued

• Your domain doesn't point to us yet. Let's Encrypt checks each name on the certificate. Wait until your DNS changes have taken effect. See How long DNS changes take to work.
• One of your names points elsewhere. The certificate also covers names such as www.yourdomain.com and mail.yourdomain.com. Check that each one you use points to PaduHost.
• Your domain has a CAA record that doesn't allow Let's Encrypt. Add letsencrypt.org to it or remove it. See Managing DNS records in DirectAdmin.
• You're using Cloudflare's proxy. If issuing fails, set the records to DNS only (grey cloud) until the certificate is issued.

Let's Encrypt limits repeated failed attempts, so fix the cause before you try again.

Next step

Make sure every visitor uses the secure version of your website. See Forcing HTTPS on your website.