Get Free SSL Certificates

Types of certificates

  • DV Domain Validated certificates
  • OV Organization Validated certificate
  • EV Extended Validation certificates

Free ssl authorities


This is a guide to get a DV certificate by Let’s Encrypt using Certbot

Install Certbot

$ wget
$ chmod +x certbot-auto
$ mv certbot-auto /usr/local/bin/

certonly: A Certbot plugin
-d DOMAIN: The domain you want to obtain a certificate for
—preferred-challenges: The way to verify your domain
—server: ACME v1 or v2 protocol server

Apply for ssl certificate

$ certbot-auto certonly -d "" --manual --preferred-challenges dns-01 --server

Follow the hits and add a TXT dns record. Then you will get your certificates at /etc/letsencrypt/live/yourdomain/

Enable HTTPS

Here is my nginx config file

user root;
worker_processes 2;

error_log /var/log/nginx/error.log;
pid /root/app/;

events {
    worker_connections 1024;

http {
    include            mime.types;
    default_type       application/octet-stream;
    sendfile           on;
    keepalive_timeout  65;

    server {
        listen 443 http2 ssl; 

        ssl_certificate         /root/app/cert/;
        ssl_certificate_key     /root/app/cert/;
        ssl_trusted_certificate /root/app/cert/;

        root /root/app/blogger;
        location / {
            root   /root/app/blogger;
            index  index.html index.htm;
            autoindex on;
            autoindex_exact_size on;
            autoindex_localtime on;

    server {
        listen 80;
        return 301;


[1] Types of SSL certificates – choose the right one
[2] Let’s Encrypt 免费通配符 SSL 证书申请流程