Free SSL With Let’s Encrypt in 2026: How to Get HTTPS

Q: I have SSL but the padlock doesn’t show — why?

The usual cause is mixed content, where images or scripts still load over http, or HTTPS not being forced yet. Fix it by switching internal links to https and enabling Force HTTPS.

Let's Encrypt free SSL guide — installation, auto-renewal, wildcard certificates and security comparison with paid SSL

By CloudPicked Review Team•Last updated June 14, 2026•8 min read

Free SSL With Let’s Encrypt in 2026: How to Get HTTPS

What is Let’s Encrypt
Is it secure enough
Install via control panel
Install with Certbot
Free wildcard
90-day renewal
Force HTTPS & mixed content
Hosts that make SSL easy
FAQ

What is Let’s Encrypt

Let’s Encrypt is a non-profit Certificate Authority that issues SSL/TLS certificates for free and automatically, letting any website move from HTTP to HTTPS at no cost. It is now the most widely used CA in the world.

100% free with no annual fee
Issues certificates automatically via the ACME protocol
Supported by most hosting providers and control panels
It is DV (Domain Validation) — proving domain ownership
Trusted by every major browser

Is free SSL as secure as paid?

A common myth is that free SSL is weaker. In reality the encryption is identical — both free and paid certificates use the same AES and TLS 1.3. The difference is the level of identity validation, not encryption strength.

Identical encryption: AES-256, TLS 1.3
The browser padlock looks the same
The difference is validation: Let’s Encrypt is DV only
Blogs, general sites and small shops are fine with DV
Large organisations needing a verified name may consider OV/EV

Installing Let’s Encrypt via a control panel

The easiest route is your host’s control panel. Quality hosts issue and renew Let’s Encrypt automatically in a few clicks with no command line. In DirectAdmin, the SSL Certificates menu lets you issue a free certificate instantly.

Open the control panel and choose SSL Certificates
Select “Free & automatic certificate from Let’s Encrypt”
Tick the domain and www names you want covered
Save, then enable Force HTTPS
The host auto-renews every 90 days

Installing with Certbot on a VPS

If you manage your own VPS or server, Certbot — the official Let’s Encrypt client — issues certificates and configures Apache or Nginx automatically, with a cron job for renewal.

Install Certbot via your system package manager
Run certbot --nginx or certbot --apache
Certbot edits the config and reloads the server for you
Set a systemd timer/cron for automatic certbot renew
Test with certbot renew --dry-run

Free wildcard SSL via DNS challenge

Let’s Encrypt also issues free wildcard certificates (*.example.com), but they must be validated with a DNS challenge instead of HTTP. This suits sites with many subdomains, since one certificate covers all first-level subdomains.

One wildcard covers blog./shop./api.example.com
Must be validated via DNS-01 (adding a TXT record)
Some panels and Certbot plugins automate the DNS challenge
It does not cover nested subdomains like a.b.example.com
Ideal for systems that spin up subdomains often

Why 90 days, and how renewal works

Let’s Encrypt certificates last 90 days — deliberately shorter than paid SSL — for security and to encourage automated renewal. Configured correctly, you never have to touch it.

Short lifespans limit risk if a key leaks
Renewal triggers automatically around 30 days before expiry
A good host handles it all in the background
Set an alert in case renewal fails
Never disable the cron/timer that performs renewal

Forcing HTTPS and fixing mixed content

After installing SSL, force a redirect from HTTP to HTTPS and fix any mixed content — images or scripts still loaded over http:// — which stops the padlock appearing even with SSL active.

Enable Force HTTPS in the panel, or a 301 redirect in .htaccess
Update internal links to https:// or protocol-relative //
Check plugins/themes that load resources over http
Use the DevTools console to find mixed-content warnings
Consider enabling HSTS once every page is fully on HTTPS

Choosing a host that makes free SSL easy

The best SSL experience is one you never have to think about. In our hands-on use, a host that auto-provisions Let’s Encrypt on DirectAdmin, renews it for you and has a Thai support team lets beginners get HTTPS running in minutes without any commands.

Look for “Free SSL” or “Let’s Encrypt” in the plan specs
A DirectAdmin panel that issues SSL in one click
Auto-renewal on by default
Support that helps fix mixed content/redirects
SSD and Thailand-based servers keep HTTPS fast

Frequently Asked Questions

Is a host’s free SSL different from Let’s Encrypt?

Mostly they are the same, because many hosts use Let’s Encrypt as their bundled free SSL. Some use another free CA like ZeroSSL, but the level is still DV. If a plan says Free SSL it usually means Let’s Encrypt.

Do I have to renew Let’s Encrypt myself?

No. Configured correctly it auto-renews every 90 days. A good host handles it in the background, while on a VPS Certbot’s cron or systemd timer does the job.

I have SSL but the padlock doesn’t show — why?

The usual cause is mixed content — images or scripts still loading over http:// — or HTTPS not being forced yet. Fix it by switching internal links to https and enabling Force HTTPS.

Can I use Let’s Encrypt for an online store?

Yes, and it is very common. General online stores can use DV SSL like Let’s Encrypt to encrypt customer data and meet basic security requirements. Payments usually go through gateways that have their own security.