Validate, download and install your certificate

Give a CSR, prove the domain is yours, then install the files.

1. Give us a CSR

A certificate signing request (CSR) comes from the server the certificate will be installed on. Most hosting control panels create one for you (look for "SSL" or "Generate CSR"). Keep the private key created with it: you need it to install the certificate and we never see it. The certificate's page also shows a command to create one on your own server. Paste the CSR into your certificate.

2. Confirm the domain is yours

  • DNS record (recommended): if your domain uses our nameservers the record is added for you. Otherwise add the one record we show at your DNS provider. It can take up to an hour; the certificate is issued automatically once it is seen.
  • Email: the certificate authority emails an address at the domain. Open the message and click the link to approve.
  • File: upload a small text file to your website at the address we show. The certificate is issued once it can be read.

We check regularly and email you as soon as the certificate is issued. If the details are not shown yet, reload the page in a minute.

3. Download and install

Once issued, download the certificate from its page and install it on your server together with the private key you created with the CSR. The main file holds the certificate and its intermediate certificate, which is what most servers and hosting panels ask for. Other formats and reissuing are on the same page.