Order and install an SSL certificate

Which SSL certificate to choose, how validation works, and how to download and install your certificate files.

Do you need one?

Every website and APEX domain hosted with us already gets a free SSL certificate, issued and renewed automatically — see Free SSL certificates: how HTTPS works on your service. A paid certificate is for:

• websites and servers hosted elsewhere;
• businesses that need their verified organisation name in the certificate (OV or EV), for example for tenders or banking requirements.

Choose a certificate

Certificates are sold for one or two years.

Validation

• DV certificates: the certificate authority checks that you control the domain. If your domain uses our nameservers, we add the validation record for you and the certificate is usually issued within minutes. Otherwise our team contacts you with the record to add.
• OV and EV certificates: the certificate authority also verifies your organisation, so our team will ask you for company documents. Issuing takes the business days shown above.

Certificate lifetime and reissues

Public SSL certificates may be valid for at most 200 days. When you buy a one- or two-year term, the certificate is reissued during the term, and we email you each time the new certificate is ready. You are also reminded before a certificate expires.

Download and install

When the certificate is issued, open your SSL service in the client area. Under Download certificate files:

• Nginx: use the full chain and the private key.
• Apache: use the certificate, the CA bundle and the private key.
• ORDS or Tomcat: open a support ticket and we will prepare a keystore for you.

Warning: The private key gives full control of your certificate. Never send it by email or share it in a ticket.

Refunds

New certificate orders can be refunded within 7 days; a refunded certificate is revoked. See our Refund Policy for details.