SSL certificate generator
If this is your first time, keep test mode on: you go through the whole process without using up Let's Encrypt limits, then repeat it in production mode. Don't close the tab until you're done; the keys exist only in its memory. Not sure where to start? Read how it works.
Checking whether you're logged in…
You need a free account to generate certificates
Signing up takes an email address and a password. With an account:
- we'll remind you by email when it's time to renew your certificate,
- we'll keep a history of your certificates, without the private key,
- we'll show you the installation guide for your hosting.
Your private key is still created in your browser and never reaches our server.
-
Enter your domain
One or more (at most 10), separated by commas. A certificate for all subdomains: *.example.com (DNS verification only).
-
Verify your domain
Don't close or reload this tab. The keys exist only in its memory.
-
Download your certificate
Download the private key now. Once you close the tab, it can't be recovered.
Most panels need two files: privkey.pem (the key) and fullchain.pem (the certificate). Panels with three fields take cert.pem and chain.pem separately instead of fullchain.pem. What to paste into which field: guides for your hosting (they open in a new tab; this one stays open).
Is the certificate working on your site?
After installing it, open your site in a new tab and check that the browser shows no warning.
Congratulations, your site has a valid certificate.
freessl.pl is free and ad-free, and its server and email are kept running by one person. If the site saved you time or money, you can buy freessl.pl a coffee.
Buy a coffee on buycoffee.to It's voluntary. Your certificate, account and reminders work the same either way. The page opens in a new tab.What to check
- Reload the page or open it in a private window: the browser may have kept the previous certificate.
- Check that the panel has the certificate from this run, not an earlier test one.
- Paste the whole fullchain.pem into the certificate field, not just cert.pem (unless the panel has a separate chain field).
Help: the guide for your hosting · “Your connection is not private” · Mixed content · write to kontakt@freessl.pl
Show the certificate as text