Select Page

HTTPS on a Website with an SSL Certificate: How to Obtain an SSL Certificate for Free

by | Jun 10, 2024 | Uncategorized

HTTPS (HyperText Transfer Protocol Secure) is a protocol that secures the communication between a user’s browser and the website they are visiting. This security is achieved through the use of SSL (Secure Socket Layer) or its successor, TLS (Transport Layer Security) certificates. This article will delve into the importance of HTTPS and SSL certificates, and guide you on how to obtain an SSL certificate for free.

What is HTTPS and SSL?

HTTPS

HTTPS stands for HyperText Transfer Protocol Secure. It is the secure version of HTTP, the protocol over which data is sent between your browser and the website you are connected to. The ‘S’ at the end of HTTPS stands for ‘Secure’. This means that all communications between your browser and the website are encrypted.

SSL

SSL (Secure Socket Layer) is a standard security protocol for establishing encrypted links between a web server and a browser in an online communication. SSL ensures that all data passed between the web server and browsers remain private and integral. SSL was succeeded by TLS (Transport Layer Security), which is based on the same principles but is more secure. However, the term SSL is still widely used.

Importance of HTTPS and SSL Certificates

  1. Data Security: SSL certificates encrypt data sent between the user and the server. This encryption makes it difficult for hackers to intercept and read the information exchanged.
  2. Trust and Credibility: Websites that use HTTPS are marked with a padlock symbol in the address bar, which assures users that their connection is secure. This increases trust and credibility.
  3. SEO Benefits: Search engines like Google prioritize websites that use HTTPS over those that don’t. This means that having an SSL certificate can improve your website’s search engine ranking.
  4. Compliance: Certain industries require the use of SSL certificates to comply with data protection regulations, such as the GDPR in Europe.
  5. Preventing Data Breaches: By encrypting data, SSL certificates help in preventing data breaches and protecting sensitive information like credit card details and personal information.
See also  10 Ways SEO and Product Teams Can Collaborate to Ensure Success

How to Obtain an SSL Certificate for Free

There are several ways to obtain an SSL certificate for free. Here, we will discuss some of the most popular and reliable methods.

1. Let’s Encrypt

Let’s Encrypt is a free, automated, and open certificate authority (CA) run by the Internet Security Research Group (ISRG). It provides SSL/TLS certificates that are just as secure as paid certificates.

Steps to Obtain an SSL Certificate from Let’s Encrypt:

  1. Install Certbot: Certbot is a free, open-source software tool for automatically using Let’s Encrypt certificates on websites.
    • For Ubuntu:
      bash

      sudo apt-get update
      sudo apt-get install certbot python3-certbot-apache
    • For CentOS:
      bash

      sudo yum install epel-release
      sudo yum install certbot python2-certbot-apache
  2. Obtain the Certificate:
    bash

    sudo certbot --apache

    Follow the prompts to complete the installation. Certbot will automatically obtain and install the SSL certificate.

  3. Renew the Certificate: Let’s Encrypt certificates are valid for 90 days. To renew automatically, set up a cron job.
    bash

    sudo crontab -e

    Add the following line to run the renewal twice a day:

    bash

    0 */12 * * * /usr/bin/certbot renew --quiet

2. Cloudflare

Cloudflare offers a free SSL certificate as part of its free plan. This is a great option for those who also want to benefit from Cloudflare’s CDN and security features.

Steps to Obtain an SSL Certificate from Cloudflare:

  1. Sign Up: Create a free account on Cloudflare and add your website.
  2. Change Nameservers: Update your domain’s nameservers to those provided by Cloudflare.
  3. Enable SSL: Once your site is active on Cloudflare, go to the SSL/TLS settings and set the SSL mode to ‘Full’ or ‘Flexible’.
  4. Verify: Check that your website is accessible over HTTPS.

3. ZeroSSL

ZeroSSL offers a free 90-day SSL certificate that can be renewed indefinitely.

Steps to Obtain an SSL Certificate from ZeroSSL:

  1. Sign Up: Create a free account on ZeroSSL.
  2. Generate CSR: Generate a Certificate Signing Request (CSR). This can be done using OpenSSL:
    bash

    openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr
  3. Submit CSR: Upload the CSR to ZeroSSL and follow the verification steps.
  4. Download and Install: Once verified, download the SSL certificate and install it on your server.
  5. Renew the Certificate: Repeat the process every 90 days.

Installing SSL Certificates

On Apache

  1. Copy the Certificates: Copy the certificate files to the appropriate directory on your server, typically /etc/ssl/certs/ and the private key to /etc/ssl/private/.
  2. Edit Apache Configuration: Open the Apache configuration file for your site, typically found in /etc/apache2/sites-available/ on Ubuntu or /etc/httpd/conf.d/ on CentOS.
    bash

    sudo nano /etc/apache2/sites-available/your_site.conf
  3. Add SSL Configuration:
    apache

    <VirtualHost *:443>
    ServerAdmin webmaster@your_domain.com
    ServerName your_domain.com
    DocumentRoot /var/www/html

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/your_domain.crt
    SSLCertificateKeyFile /etc/ssl/private/your_domain.key
    SSLCertificateChainFile /etc/ssl/certs/DigiCertCA.crt

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
    SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-6]" \
    nokeepalive ssl-unclean-shutdown \
    downgrade-1.0 force-response-1.0
    CustomLog ${APACHE_LOG_DIR}/ssl_request_log \
    "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
    </VirtualHost>

  4. Enable SSL Module and Site:
    bash

    sudo a2enmod ssl
    sudo a2ensite your_site.conf
  5. Restart Apache:
    bash

    sudo systemctl restart apache2

On Nginx

  1. Copy the Certificates: Copy the certificate files to the appropriate directory on your server, typically /etc/nginx/ssl/.
  2. Edit Nginx Configuration:
    bash

    sudo nano /etc/nginx/sites-available/your_site
  3. Add SSL Configuration:
    nginx

    server {
    listen 443 ssl;
    server_name your_domain.com;

    ssl_certificate /etc/nginx/ssl/your_domain.crt;
    ssl_certificate_key /etc/nginx/ssl/your_domain.key;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";

    location / {
    root /var/www/html;
    index index.html index.htm;
    }
    }

  4. Restart Nginx:
    bash

    sudo systemctl restart nginx

Conclusion

Implementing HTTPS on your website with an SSL certificate is crucial for ensuring data security, building trust with your users, and improving your search engine rankings. By following the steps outlined in this article, you can obtain an SSL certificate for free and secure your website. Whether you choose Let’s Encrypt, Cloudflare, or ZeroSSL, the process is straightforward and accessible. Secure your website today and reap the benefits of a secure and trusted online presence.