In this post I will show you how to get a free SSL certificate for your blog/website for 3 months. And before this free SSL expires, you can renew it and add it again, without any disruption of https version of your site in between.
There’s a free SSL project that automates everything. https://letsencrypt.org
I haven’t tried this yet, but this is very easy to setup and no maintainance. This will automatically fetch new SSL certificates every 3 months.
2 main things:
- If you have access to the web server you can add SSL crt and private key files directly. Most web servers are nginx/Apache and you can follow similar tutorials online to add SSL.
Instead of generating .csr online, use this command (might have to update repo and install openssl package. In ubuntu, do this: sudo apt-get install openssl ):
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
server.key is the private key(this you should never share with anyone), server.csr is the one you upload to ssl.com for getting an SSL Certificate.
- If you don’t have access to the web server: You are using a hosting space by some provider, they must be giving you access to add .crt and private key files.
Why SSL ?
Apart from securing user data ( if your site allows user logins and use user data) one advantage/plus point is search engine rankings. https sites have good ranking. ( thats what i read!)
Follow the screenshots and get your free SSL!
Step1: Generate .CSR and Private Key online if you dont have access the the web server. If you have, skip this step. Link for online CSR Generation: https://csrgenerator.com
Step 2: Go to ssl.com and create a free account. Login. Now go to this URL and follow the screenshots: https://www.ssl.com/certificates/free/
To perform validation, you can send email confirmation to registered email for that domain (easiest) or upload the specified file at specified path (easier) or add a cname record in your Domain Registrar Account.
Wait for 5-10 minutes and you can see the domain validation success if you finished above step.
Now you have the SSL Certificates! Based on your webserver, download them and install.
If your hosting provider gives you option to upload SSL ( like my hosting provider hostinger.in ) follow next steps to add this SSL certificate.
Step 3: If your hosting provider gives you option to upload SSL ( like my hosting provider hostinger.in ) follow next steps to add this SSL certificate.
One big question can be like “Can i renew my SSL before it gets expired without messing up my current SSL installation?”
Yes, you can upgrade this SSL for 3 months again for free. Dont click on Upgrade in ssl.com dashboard.
Just follow the same steps from top ( go to https://www.ssl.com/certificates/free/) , give the same domain name you want to renew. Now you can get the expiry date extended to another 3 months! And so on!
Thanks to my friend Yadnesh who told me about ssl.com