Free SSL Certificates in Minutes
Set up with the web app, an ACME client or the REST API, whichever fits how you work.
No credit card required. Certificates are issued by ZeroSSL.
Why use SSL For Free
-
100% Free Certificates
Never pay for SSL again. Powered by ZeroSSL ACME with free 90-day certificates.
-
Widely Trusted
Our free SSL certificates are trusted in 99.9% of all major browsers worldwide.
-
Enjoy SSL Benefits
Protect user information, generate trust and improve Search Engine Ranking.
3,000,000+ Free SSL Certificates Created With SSL For Free
How It Works
Three ways to get your certificate from ZeroSSL. Pick the one that fits how you work.
Web App: step by step
- Create a free ZeroSSL account, or log in if you already have one.
- Click New Certificate and enter your domain, for example
example.com. - Choose the 90-day certificate (free) and leave Auto-Generate CSR switched on.
- Verify that you own the domain: by email to an admin address, by uploading a file to your server (HTTP) or by adding a CNAME record to your DNS.
- Download the certificate files and install them on your server. Our tutorials cover the common platforms.
ACME: step by step
- In your ZeroSSL account, open Developer and generate your EAB credentials (a key ID and an HMAC key). acme.sh can skip this and register with your email address instead.
- Point your tool at the ZeroSSL ACME server and request the certificate:
acme.sh
acme.sh --register-account -m you@example.com --server zerossl acme.sh --issue -d example.com -w /var/www/html --server zerosslwin-acme
wacs.exe --baseuri https://acme.zerossl.com/v2/DV90 --eab-key-identifier YOUR_EAB_KID --eab-key YOUR_EAB_HMAC_KEYCaddy · Caddyfile
{ acme_ca https://acme.zerossl.com/v2/DV90 acme_eab { key_id YOUR_EAB_KID mac_key YOUR_EAB_HMAC_KEY } } - The tool proves that you own the domain over HTTP or DNS and installs the certificate.
- Renewal is automatic: acme.sh adds a cron job, win-acme a scheduled task, and Caddy renews its certificates by itself.
REST API: step by step
- In your ZeroSSL account, open Developer and copy your API access key.
- Create the certificate by sending your domain and a CSR:
POST /certificates - Start domain verification with the method you prefer (email, HTTP file or CNAME):
POST /certificates/{id}/challenges - Once the status is
issued, download the certificate:GET /certificates/{id}/download/return
Tutorials
Explore our community-driven tutorials to guide you through SSL certificate verification and installation for various server setups.
cPanel Shared Hosting
Microsoft IIS
Microsoft Azure
Amazon Web Services
Google App Engine
NGINX Server
GoDaddy Hosting
Hostinger Hosting
Plesk Server
Ubuntu/Linux Server
Apache Web Server
Docker + DigitalOcean
Tomcat Server
Heroku Platform
BigCommerce
Other Platforms (Wix, Namecheap, IONOS, etc.)
Convert Certificates to PFX (IIS / Azure)Pick the ACME client that fits your system. All four work with ZeroSSL; ZeroSSL's comparison goes into more detail.
Rather let your web server handle it?
These get and renew certificates on their own, without a separate ACME client.
With the REST API, your own software creates, validates and downloads certificates. For a single server, ACME is the easier choice; the API is the better fit in cases like these:
Hosting platforms and control panels
Issue certificates for your customers' domains straight from your own dashboard or provisioning system.
Systems without an ACME client
Create certificates centrally and upload them to load balancers, CDNs, appliances or other systems that can't run an ACME client.
Email validation
Verify domains by email when you can't place a file on the server or change DNS. ACME validates over HTTP or DNS only.
Overview and reporting
List all certificates in your account with their status and expiry dates, for your own monitoring and reports.
Advanced Options
Prevent WWW Addition
Remove the auto-added www domain on the verification page by editing domains before submission.
SSL Scan
Check the certificate installed on your domain: whether it's valid, when it expires and whether the chain is complete.
Wildcard SSL Certificates
Secure all sub-domains with a wildcard certificate (e.g., *.example.org). Includes the root domain.
Multiple Domains/Sub-Domains
Add multiple domains or sub-domains in the second step. Use email, HTTP, or DNS verification for correct directory uploads.
200-Day Certificates
Renew just twice a year instead of every 90 days.
A Real Customer Service Team
Questions about your certificates? Paid plans get help from real people at ZeroSSL who know certificates inside out.
Audit Log
See who in your account created, renewed or revoked which certificate, and when.
ZeroSSL Protect
Regular security scans of the domains you secure with ZeroSSL, with reports on what needs fixing. Try it for free.
Get Started By Choosing Your SSL Plan
For most websites the free plan is all you need. Paid plans add 200-day certificates, which renew only twice a year, and wildcards.
Free
Free SSL package. No credit card required.
$0 forever
- 3 90-day certificates in the Web App
- Unlimited 90-day certificates via ACME
- No credit card required
Paid plans
For businesses that need longer validity, wildcards and more certificates.
from $9.99 per month
- 200-day certificates, renewed twice a year
- Wildcard certificates for all subdomains
- Unlimited 90-day certificates in the Web App
Compare all plans
SSL For Free has flexible options with monthly and yearly billing to fit everyone's budget
Free plan
Free SSL package. No credit card required.
$0 per month
No charge
ZeroSSL Certificates
- 390-Day Certificates
- 200-Day Certificates
- 200-Day Wildcards
- ACME
Basic
Basic package with unlimited 90-day certificates.
$9.99$13.99 per month
billed yearlyor $9.99 billed yearly
ZeroSSL Certificates
- 90-Day Certificates
- 5200-Day Certificates
- 200-Day Wildcards
- ACME
Premium
Advanced features and more access to 200-day certificates.
$54.99$74.99 per month
billed yearlyor $54.99 billed yearly
ZeroSSL Certificates
- 90-Day Certificates
- 15200-Day Certificates
- 1200-Day Wildcards
- ACME
Business
Best certificate package with extensive wildcard support.
$109.99$149.99 per month
billed yearlyor $109.99 billed yearly
ZeroSSL Certificates
- 90-Day Certificates
- 30200-Day Certificates
- 4200-Day Wildcards
- ACME
Need a Custom SSL Solution?
We offer enterprise-level certificates tailored to your needs.
About 
ZeroSSL is a certificate authority based in Vienna, Austria. We issue free and paid SSL certificates, run SSL For Free and help build the open-source tools that make HTTPS automatic.
Our contributions to automation
ACME clients
A lightweight ACME client written in Bash, valued for its simplicity and small footprint. 104Contributors 66Issues 6.3KStars 723Forks Latest release: v0.7.2 · Last push: nginx-proxy/acme-companion A Docker container that issues and renews certificates automatically for every container behind nginx-proxy. 86Contributors 36Issues 7.7KStars 822Forks Latest release: v2.8.2 · Last push: caddyserver/certmagic 
A Go library that adds fully automatic HTTPS to any Go program, and the engine behind Caddy. 81Contributors 26Issues 5.6KStars 365Forks Latest release: v0.25.6 · Last push: srvrco/getssl 
A Bash script that gets certificates for local and remote servers, for example over SSH. 119Contributors 90Issues 2.2KStars 392Forks Latest release: v2.52 · Last push: Web servers
Market leader The leading web server with automatic HTTPS built in: it gets and renews certificates from ZeroSSL and Let's Encrypt with no setup at all. 479Contributors 200Issues 78.8KStars 5.2KForks Latest release: v2.11.9 · Last push: nginx-proxy/nginx-proxy An automated nginx reverse proxy for Docker that, together with acme-companion, puts HTTPS in front of every container. 170Contributors 286Issues 19.9KStars 3KForks Latest release: 1.11.6 · Last push: GitHub figures as of November 6, 2026.
Frequently Asked Questions
Is this free for commercial use?
Yes, our SSL certificates are free for all uses, including commercial purposes.
What do I need before installing my SSL certificate?
Ensure you have:
- Private Key from certificate creation.
- Certificate (CRT) file.
- Intermediate/CA Bundles if required.
PFX Conversion Guide for IIS/Azure.
How long are SSL certificates valid?
Free certificates are valid for 90 days. Automate renewals with ZeroSSL ACME and a client such as acme.sh or win-acme, or use a web server like Caddy that renews them by itself.
Can I use my own CSR?
Yes, select manual verification and input your CSR before generating the certificate.
Do these certificates work for IP addresses?
No, certificates are only for registered domain names.
Can verification files/TXT records be deleted after verification?
Yes, verification files or records can be deleted after use.
What if I lost my private key?
You'll need to reissue or create a new certificate, as the private key is essential for installation.
Why does my website show a security error after installation?
Check for incorrect installation or mismatched keys using SSL Labs. Ensure you have the correct CRT, private key, and CA bundle. Before installation checklist
Why does my website show "Not Secure" after installation?
Insecure content (e.g., images, iframes) may be the cause. Use Why No Padlock to diagnose and fix issues.
Why isn't my website using HTTPS after installation?
Configure your server (e.g., .htaccess, nginx.conf) to redirect to HTTPS. Configuration tutorials
Where can I find more help?
Visit our Help Center at help.zerossl.com for platform-specific guides and common troubleshooting.
Further questions or feedback?
If you want to contact us, please visit our contact page.
Troubleshooting
If you have some issues, this section can help you understand and research possible problems.
Certificate Verification
Learn what to do if your certificate verification fails due to domain validation issues or incorrect DNS/HTTP setup.
Certificate Pending
Understand why your certificate may be stuck in pending validation and how to resolve it quickly.
Certificate Installation
Get help with installing SSL certificates on your server or platform, including common pitfalls and best practices.