How to Install a Free SSL Certificate (cPanel & VPS Guide)

An SSL certificate turns http:// into https://, encrypts everything between your visitors and your server, and removes the "Not secure" warning browsers show. The good news: you don't need to pay for it. This guide explains how free SSL works and shows you how to install it on cPanel hosting, on a VPS with Nginx or Apache, and how to make sure it renews automatically.

What is an SSL certificate (and why do you need one)?

SSL (now technically TLS) certificates prove your domain's identity and enable encrypted HTTPS connections. Without one:

• Chrome, Edge and Firefox label your site "Not secure", which hurts trust and conversions
• Logins, contact forms and payment details travel unencrypted
• You miss out on HTTPS as a Google ranking signal (it's a lightweight signal, but a real one)
• Modern browser features and HTTP/2 or HTTP/3 performance benefits aren't available

Free vs paid SSL: what's the difference?

Free certificates from Let's Encrypt (and the similar AutoSSL in cPanel) provide the same encryption strength as paid ones. They're Domain Validated (DV), which is exactly what most websites, blogs and online stores need. Paid certificates mainly add organization validation (OV/EV), warranties or support. For the vast majority of sites, free SSL is the right choice.

Option 1: Free SSL on cPanel hosting (easiest)

On HAAN HOSTING cPanel hosting, free SSL is included on every plan and usually installs automatically once your domain points to our servers. To check or trigger it:

1. Log in to cPanel.
2. Open SSL/TLS Status (under Security).
3. Select your domains and click Run AutoSSL.
4. Once the padlock shows as valid, go to Domains and enable Force HTTPS Redirect.

Option 2: Let's Encrypt on a VPS with Nginx

Make sure your domain's A record points to your server and ports 80 and 443 are open. Then:

sudo apt update
sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d example.com -d www.example.com

Certbot verifies your domain, installs the certificate into your Nginx config and offers to redirect HTTP to HTTPS. Choose yes. Setting up WordPress? Follow our full WordPress on VPS guide.

Option 3: Let's Encrypt on a VPS with Apache

sudo apt install certbot python3-certbot-apache -y
sudo certbot --apache -d example.com -d www.example.com

Make sure it renews automatically

Let's Encrypt certificates are short-lived by design (currently up to 90 days), so automatic renewal is essential. The Certbot package installs a timer that renews certificates before they expire. Test it:

sudo certbot renew --dry-run
systemctl list-timers | grep certbot

After installing SSL: fix "mixed content"

If the padlock is missing after installation, some images, scripts or CSS are still loading over http://. To fix it:

• WordPress: In Settings → General, set both URLs to https://. Then use a search-and-replace tool to update old http:// links in the database.
• Open your browser's developer console (F12), which lists every mixed-content resource.
• Update hard-coded links in your theme or custom code.

SSL checklist for SEO

• Certificate valid for both example.com and www.example.com
• HTTP redirects to HTTPS with a 301 redirect
• One preferred version (www or non-www), with the other redirecting to it
• No mixed-content warnings in the browser console
• Canonical tags and sitemap use https:// URLs
• HTTPS property added in Google Search Console
• Auto-renewal tested with a dry run