Cheap SSL certificate?

Rauru

Newbie
Joined
Mar 22, 2023
Messages
42
Reaction score
21
Hi there.

Does anybody know where I can get a cheap SSL certificate which is good?
I've been looking but I am not an expert here so I can't decide.

It's for a blog. The domain is with Godaddy and the hosting with Cloudways (digital ocean).

Godaddy offers something around paying 136 USD now and the SSL lasts 2 years (so 81 USD/year). It includes firewall and more stuff but I think it's expensive.
 
Basic SSL certificates are free anyway. You could use https://letsencrypt.org and it will work absolutely fine. As for it getting expired after a while, you could always write a shell script to renew it periodically, by issuing certbot renew command, and then restarting the server.

Or even easier, route the traffic through cloudflare, and enable cloudflare flexible ssl. That also works absolutely fine.
 
Basic SSL certificates are free anyway. You could use https://letsencrypt.org and it will work absolutely fine. As for it getting expired after a while, you could always write a shell script to renew it periodically, by issuing certbot renew command, and then restarting the server.

Or even easier, route the traffic through cloudflare, and enable cloudflare flexible ssl. That also works absolutely fine.

What happens when I have to renew it? Does it affect the SEO ranking?

If I use Cloudfare do I have to pay?


According to @RoiBox
"if you get a free ssl on Cloudflare it only protects from Cloudflare to the visitor, not from server to Cloudflare. So this is a bad solution. SSL needs to be set at server level only."

What do you think?
 
What happens when I have to renew it? Does it affect the SEO ranking?
Not atall. It should have absolutely nothing to do with SEO. Your site remains secure all the time.

If I use Cloudfare do I have to pay?
Yes, a big $0. :p
According to @RoiBox
"if you get a free ssl on Cloudflare it only protects from Cloudflare to the visitor, not from server to Cloudflare. So this is a bad solution. SSL needs to be set at server level only."

What do you think?
That's a very good question and a nice observation from @RoiBox.

However, it does not have to be like that. Instead of sending plaintext data to Cloudflare, you could have your own public/private key pair (it does not have to be trusted by the browsers. CF is smart enough to communicate with self signed certs) configured for the server, and listen to the 443, which would then be used by cloudflare during the communication. But Roi is right that most people who go with flexible SSL just choose to communicate over plaintext. Using the Strict SSL is a better choice afterall. You will need to do some research to make it work though.
 
I buy domain and hosting on namecheap and I always get free ssl which is also automated or a few clicks to setup. Godaddy takes advantage of noobs to bill for free things even email addresses.
 
Hello! Rauru :)

If you looking for a premium and cheapest SSL service so you can look at SSLs.com
But if you looking a 100% free and common SSL service so you can try Let's Enrypt or CloudFlare Origin SSL feature.

I hope it helps you :)

Thanks & Regards,
Team HostWild.
 
Now I work on my wordpress site to finish the design, before the login I type in the url : mydomain.com/wp-admin and whammm!
the google browser showing "website is not secure" for few seconds, then it loads with the ssl lockpad.

This often happen when I type other domains in google websites who have ssl, but showing for few seconds as not secure?
What is this?

Browser problem, redirect problem? Free Let's Encrypt ssl makes these problems?

Happy weekend !
 
Now I work on my wordpress site to finish the design, before the login I type in the url : mydomain.com/wp-admin and whammm!
the google browser showing "website is not secure" for few seconds, then it loads with the ssl lockpad.

This often happen when I type other domains in google websites who have ssl, but showing for few seconds as not secure?
What is this?

Browser problem, redirect problem? Free Let's Encrypt ssl makes these problems?

Happy weekend !
You probably don’t have a redirect rule for http to https. In your case, wp does the redirection for you (since your site url is https). Fix that and you will be fine. If you are using cf, enable force https (or something like that, i forgot).


edit:
Refer to this :)

https://developers.cloudflare.com/ssl/edge-certificates/additional-options/always-use-https/
 
Ok thank you for the tip should I do it manually (how?) or using easy redirects https plugin?
My gosh cloudflare, do you not seen on many website this white screen "we check if th econnection is secure (or something) " which comes form clouddflare, you must wait good 5-7 seconds longer to access the website you want to see.

I be sure this will shut down many peoples website traffic because CF is so good and free.......I have not seen a cdn who does such a bad shixxxty thing.
ufffff......

Have happy weekend !
 
Hello! Rauru :)

If you looking for a premium and cheapest SSL service so you can look at SSLs.com
But if you looking a 100% free and common SSL service so you can try Let's Enrypt or CloudFlare Origin SSL feature.

I hope it helps you :)

Thanks & Regards,
Team HostWild.

My theory is that a paid (cheap) ssl cert compare to free ssl, will not showing insecure warning in browsers?
paid ssl is not self signed which is more trusted by browsers?

I mean to prevent that browsers will showing insecure warnings it's better to have a paid ssl as a free ssl cert?
 
My theory is that a paid (cheap) ssl cert compare to free ssl, will not showing insecure warning in browsers?
paid ssl is not self signed which is more trusted by browsers?

I mean to prevent that browsers will showing insecure warnings it's better to have a paid ssl as a free ssl cert?
There is no such things as more trusted. Either it is trusted or it isn’t. I said this before and let me say this again, let’s encrypt ssl certs are trusted, and they will do the job just fine.
 
There is no such things as more trusted. Either it is trusted or it isn’t. I said this before and let me say this again, let’s encrypt ssl certs are trusted, and they will do the job just fine.

then these browser insecure ssl warnings are more of a missing http tp https rule ?
Where I set this rule in the htaccess file?
Do you have an actual working https rule snippet?
 
then these browser insecure ssl warnings are more of a missing http tp https rule ?
Where I set this rule in the htaccess file?
Do you have an actual working https rule snippet?
yepp.

Try something like this
Code:
https://linuxhint.com/nginx-redirect-http-https/

You redirect the http to https.


If you are using apache and not nginx, lemme know. I will look for apache rules.
 
then these browser insecure ssl warnings are more of a missing http tp https rule ?
Where I set this rule in the htaccess file?
Do you have an actual working https rule snippet?

see my screenwhot this I get when I try to visit the website: Greenwebpage.com
it shows the warning: website not supports https....so I must do a page refresh maybe then it will work.

But how many users around the globe doing this? When they seeing this warning they go back in the browser not doing a refresh and you lost visitors.
Click on th epadlock showing: this website i snot secure (text is in germany in the screenshots)
 

Attachments

  • warning.png
    warning.png
    77.3 KB · Views: 78
  • padlock.png
    padlock.png
    71.3 KB · Views: 79
Yep godaddy and cheap sslwhat a paradox jjjjjj.....
 
Back
Top