{"id":28927,"date":"2025-06-16T16:00:43","date_gmt":"2025-06-16T12:30:43","guid":{"rendered":"https:\/\/www.arvancloud.ir\/help\/?p=28927"},"modified":"2025-07-31T16:27:07","modified_gmt":"2025-07-31T12:57:07","slug":"get-free-ssl","status":"publish","type":"post","link":"https:\/\/www.arvancloud.ir\/help\/en\/get-free-ssl\/","title":{"rendered":"How to Get a Free SSL Certificate"},"content":{"rendered":"<p class=\"md-end-block md-p\"><span class=\"md-plain\">The first step in enabling HTTPS support for a website is obtaining an SSL certificate. Obtaining a free SSL certificate from Arvancloud is made possible with just one click. Certificates are files issued by Certificate Authorities (CAs). To obtain an SSL certificate, several steps must be followed, which include:<\/span><\/p>\n<ul class=\"ul-list\" data-mark=\"-\">\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Generating CSR<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Sending CSR to a trusted CA<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Installing the SSL certificate received from the CA on the server<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Repeating the process every time the certificate expires<\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">If any issues or errors occur during these steps, the HTTPS connection between the browser and the server will fail.<\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">In recent years, Arvancloud has worked to provide its users with a free 3-month SSL certificate from Let\u2019s Encrypt. With this, Arvancloud users can obtain the certificate without any cost, and once it expires, it will be automatically renewed without any additional action. The added benefit of Arvancloud\u2019s free SSL certificates is that they are provided as Wildcard certificates. You can learn how to obtain a free SSL certificate from Arvancloud for your website by following <\/span><span class=\"md-meta-i-c md-link\"><a href=\"https:\/\/docs.arvancloud.ir\/en\/cdn\/https-settings\/arvancloud-cert\" rel=\"nofollow noopener\" target=\"_blank\"><span class=\"md-plain\">the provided instructions<\/span><\/a><\/span><span class=\"md-plain\">.<\/span><\/p>\n<p class=\"md-end-block md-p md-focus\"><span class=\"md-plain md-expand\">When using Arvancloud&#8217;s free SSL certificate, you no longer need to install the certificate on your main web hosting server. By enabling this option in the Arvancloud panel, the communication between your users and Arvancloud&#8217;s edge servers will be over HTTPS. However, keep in mind that communication between Arvancloud&#8217;s servers and your main hosting server will still be over HTTP. To secure this communication, you can obtain a free SSL certificate and install it on your main hosting server.<\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">This article provides instructions for Arvancloud customers who, for any reason, wish to obtain or generate a free SSL certificate for installation on their main hosting server to establish a secure connection with Arvancloud&#8217;s edge servers, using Certbot or SSL for Free website.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 class=\"md-end-block md-heading\"><span class=\"md-plain\">Issuing a Free SSL Certificate from Let\u2019s Encrypt Using Certbot<\/span><\/h2>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Let\u2019s Encrypt is a CA managed by the Internet Security Research Group (ISRG) that provides free certificates for all domains. To obtain a certificate from Let\u2019s Encrypt, software that supports the ACME protocol must be used, which runs on the web server. Below are the steps for issuing a certificate using Certbot.<\/span><\/p>\n<ol class=\"ol-list\">\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Install Prerequisites<\/span><\/strong><\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">If you have SSH access to the web server, you can use the ACM client Certbot. Once SSH access is established, ensure that Python 2.7 or 3 is supported. Use the following commands to install the prerequisites:<\/span><\/p>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"bash\" spellcheck=\"false\"><span role=\"presentation\">apt-get update<\/span>\r\n<span role=\"presentation\">apt-get install python-minimal<\/span>\r\n<span role=\"presentation\">python <span class=\"cm-attribute\">--version<\/span><\/span>\r\n<span role=\"presentation\">apt-get install git-core<\/span>\r\n<span role=\"presentation\"><span class=\"cm-builtin\">git<\/span> <span class=\"cm-attribute\">--version<\/span><\/span><\/pre>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s\"><strong><span class=\"md-plain\">Install Certbot<\/span><\/strong><\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">The next step is to install Certbot. To install Certbot from GitHub, use the following commands:<\/span><\/p>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"bash\" spellcheck=\"false\"><span role=\"presentation\"><span class=\"cm-builtin\">cd<\/span> \/opt<\/span>\r\n<span role=\"presentation\"><span class=\"cm-builtin\">git<\/span> clone https:\/\/github.com\/certbot\/certbot.git<\/span><\/pre>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Generate Wildcard SSL Certificate<\/span><\/strong><\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">A Wildcard certificate allows you to enable HTTPS for your domain and all its subdomains with a single certificate. This eliminates the need to obtain separate certificates for each subdomain.<\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">To generate a Wildcard certificate, use the following command:<\/span><\/p>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"bash\" spellcheck=\"false\"><span role=\"presentation\">certbot-auto certonly <span class=\"cm-attribute\">--manual<\/span> <span class=\"cm-attribute\">--preferred-challenges<\/span><span class=\"cm-operator\">=<\/span>dns <span class=\"cm-attribute\">--email<\/span> your@email.com <span class=\"cm-attribute\">--server<\/span> https:\/\/acme-v02.api.letsencrypt.org\/directory <span class=\"cm-attribute\">--agree-tos<\/span> <span class=\"cm-attribute\">-d<\/span> *.example.com<\/span><\/pre>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Replace <\/span><span class=\"md-link md-pair-s\" spellcheck=\"false\"><a href=\"mailto:your@email.com\">your@email.com<\/a><\/span><span class=\"md-plain\"> with your email address and example.com with your domain name. To generate a Wildcard certificate, the * must be included at the beginning of the domain name, as shown in the command above.<\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">If you need to generate multiple certificates, you can use the -d option along with your domain name.<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Domain Ownership Validation<\/span><\/strong><\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">In this step, Certbot will ask you to add a TXT record to your DNS to verify domain ownership. This request is made due to the &#8211;preferred-challenges=dns option used in the previous step. This request is like the following image:<\/span><\/p>\n<p class=\"md-end-block md-p\"><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone\" src=\"https:\/\/www.arvancloud.ir\/help\/wp-content\/uploads\/2023\/02\/-%DA%AF%D9%88%D8%A7%D9%87%DB%8C%E2%80%8C%D9%86%D8%A7%D9%85%D9%87%E2%80%8C%DB%8C-%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86-SSL-360034252133_13-jpeg.webp\" alt=\"free ssl\" width=\"720\" height=\"497\" \/><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">If you&#8217;re unfamiliar with how to add a DNS record, refer to your hosting provider\u2019s documentation for more information. To add the TXT record:<\/span><\/p>\n<ul class=\"ul-list\" data-mark=\"-\">\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Record Name<\/span><\/strong><\/span><span class=\"md-plain\">: According to the output, the record name should be _acme-challenge (depending on your DNS provider, you may need to format it as _acme-challenge.example.com).<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Record Value<\/span><\/strong><\/span><span class=\"md-plain\">: This field should be filled with the value provided by Certbot. For example, in the picture above the value provided by Certbot is VWHqMqojnAZb8oLV2ZMaqaeUUyiTAX4-3KeokqJ69hE.<\/span><\/p>\n<\/li>\n<\/ul>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">After creating the record, save the settings and press Enter in Certbot.<\/span><\/p>\n<\/li>\n<li class=\"md-list-item\">\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Check for Successful Certificate Issuance (Optional)<\/span><\/strong><\/span><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">After completing the steps, if the certificate issuance is successful, you will see a page confirming it. <\/span><\/p>\n<p class=\"md-end-block md-p\"><img decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/www.arvancloud.ir\/help\/wp-content\/uploads\/2023\/02\/-%DA%AF%D9%88%D8%A7%D9%87%DB%8C%E2%80%8C%D9%86%D8%A7%D9%85%D9%87%E2%80%8C%DB%8C-%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86-SSL-360034252133_14-jpeg.webp\" width=\"717\" height=\"523\" \/><\/p>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">You can also check the certificate status using the following command:<\/span><\/p>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"bash\" spellcheck=\"false\"><span role=\"presentation\">certbot-auto certificates<\/span><\/pre>\n<\/li>\n<\/ol>\n<h2 class=\"md-end-block md-heading\"><span class=\"md-plain\">Issuing Let\u2019s Encrypt SSL Certificates Using SSL for Free Website<\/span><\/h2>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Another way to obtain a Let\u2019s Encrypt certificate is by using the <\/span><span class=\"md-meta-i-c md-link\"><a href=\"https:\/\/www.sslforfree.com\/\" rel=\"nofollow noopener\" target=\"_blank\"><span class=\"md-plain\">SSL for Free website<\/span><\/a><\/span><span class=\"md-plain\">. Simply enter your domain name on the website to easily obtain a free Let\u2019s Encrypt certificate.<\/span><\/p>\n<h2 class=\"md-end-block md-heading\"><span class=\"md-plain\">Renewing the Issued Certificate<\/span><\/h2>\n<p class=\"md-end-block md-p\"><span class=\"md-plain\">Let\u2019s Encrypt certificates are typically valid for three months, after which they must be renewed. To renew the certificate using Certbot, simply run the following command:<\/span><\/p>\n<pre class=\"md-fences md-end-block ty-contain-cm modeLoaded\" lang=\"bash\" spellcheck=\"false\"><span role=\"presentation\">certbot-auto renew<\/span><\/pre>\n<p class=\"md-end-block md-p\"><span class=\"md-pair-s \"><strong><span class=\"md-plain\">Note<\/span><\/strong><\/span><span class=\"md-plain md-expand\">: If SSH access to the web server is not available, you will need to use your hosting provider\u2019s services. With Let\u2019s Encrypt support, they can request, install, and automatically renew the certificate on your behalf.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The first step in enabling HTTPS support for a website is obtaining an SSL certificate. Obtaining a free SSL certificate from Arvancloud is made possible with just one click. Certificates are files issued by Certificate Authorities (CAs). To obtain an SSL certificate, several steps must be followed, which include: Generating CSR Sending CSR to a [&hellip;]<\/p>\n","protected":false},"author":79,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"r1_post_views_count":"1137","feedback_yes":"1","feedback_no":"1","ads_id_sidebar":"","ads_id_content":"","footnotes":""},"categories":[249,281],"tags":[],"class_list":["post-28927","post","type-post","status-publish","format-standard","hentry","category-cdn","category-security-setting"],"lang":"en","translations":{"en":28927},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/posts\/28927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/users\/79"}],"replies":[{"embeddable":true,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/comments?post=28927"}],"version-history":[{"count":12,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/posts\/28927\/revisions"}],"predecessor-version":[{"id":29047,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/posts\/28927\/revisions\/29047"}],"wp:attachment":[{"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/media?parent=28927"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/categories?post=28927"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.arvancloud.ir\/help\/wp-json\/wp\/v2\/tags?post=28927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}