We are very happy to announce that as of today we have made Let’s Encrypt DV SSL certificates available to all of our customers. Not only are these certificates free, we’re extra thrilled to be able to offer them to you because Google has announced that SSL is an important ranking factor. Users are also being warned when non-secure information is passed through login or payment forms.
What is Let’s Encrypt?
Let’s Encrypt is an non-profit certificate authority that is founded to make the internet a more secure place. Let’s Encrypt is being backed by big tech companies like Google, Facebook, Mozilla and Sucuri. The founders of Let’s Encrypt have created a way to automatically generate, extend and revoke SSL certificates. Big part of making this possible is the way that the domain is being verified.
Normally, this verification is done by replying to an email send to the owner of a domain. Let’s Encrypt verification works a bit different. The server to which the domain is pointing makes a request for a certificate at Let’s Encrypt. Let’s Encrypts server than pushes a unique file back to that domain. If the files is allowed to be saved on the domain’s server, Let’s Encrypt is able to authenticate the right owner . Sounds complicated? Let’s Encrypt has a more clear explanation available on their site.
How does this work at Savvii?
Every 10 minutes we check if new domains have been added to websites or if domains have been linked to new websites. Then, our systems check if the DNS records of these new domains are pointing to a server of Savvii. In that case, we make contact with Let’s Encrypt to generate an SSL certificate and install it. The process can take up to 20 minutes after a new domain or site has been added.
By visiting the https:// version of your website you can check if the certificate has been made available.
How can I get free SSL for my WordPress sites?
Very simple! Follow these steps:
- Make sure your domain is being made available for use at your site at Savvii
- Point your DNS to Savvii
- Activate SSL in your site configuration
DV certificates behave the same way as ‘normal’ certificates. They will only be available for one (sub)domain. Do you need to secure all possible subdomains at once, like *.example.org, you will need to get an WildCard certificate. Let’s Encrypt does not support WildCard or Extended Validation certificates.