Free and premium SSL
for every website
Every domain registered with Airfree Clouds gets automatic Let's Encrypt SSL at no cost. Need organisation validation, extended trust, or wildcard coverage? Upgrade in minutes from the Control Panel.
- Auto-renews 30 days before expiry
- One-click install for Airfree DNS
- Trusted by all major browsers
- HSTS preload ready
Certificate types
Pick the right level of trust
From free automatic DV to legally verified EV — every certificate includes SHA-256 encryption and is trusted by Chrome, Firefox, Safari, and Edge.
Lets Encrypt
Free DV
Personal sites, blogs, dev environments
- Domain Validation (DV)
- Auto-renews every 90 days
- Covers one hostname
- Wildcard support
- Organization name in cert
- Green EV indicator
- Warranty coverage
1-year certificate
Standard DV
Small business sites, landing pages
- Domain Validation (DV)
- 1-year validity
- Auto-renewal reminder
- $10 000 warranty
- Wildcard support
- Organization name in cert
- Green EV indicator
OV certificate
Organization Validation
Business sites, e-commerce, SaaS
- Organization Validation (OV)
- 1-year validity
- Organization name in cert
- $250 000 warranty
- Auto-renewal reminder
- Wildcard support
- Green EV indicator
EV certificate
Extended Validation
Banking, legal, healthcare, high-trust checkout
- Extended Validation (EV)
- 1-year validity
- Organization name in address bar
- $1 750 000 warranty
- Auto-renewal reminder
- Legal entity verification
- Wildcard support
Unlimited subdomains
Wildcard
SaaS platforms, multi-tenant apps
- Covers *.yourdomain.com
- Unlimited subdomains
- 1-year validity
- Auto-renewal reminder
- $50 000 warranty
- Organization name in cert
- Green EV indicator
Auto-renewal
Certificates that renew themselves
An expired certificate takes your site offline for visitors and destroys search rankings. Airfree Clouds eliminates that risk.
30 days before expiry
We begin the renewal process automatically. For Let's Encrypt certificates, no action is needed — renewal completes silently.
New certificate issued
A fresh certificate is issued by the CA, validated against your domain, and signed with a 2048-bit or higher RSA key.
Auto-deployed
For domains on Airfree DNS, the new certificate installs immediately with zero downtime. External hosts receive an email with the updated bundle.
HSTS preload — the strongest HTTPS guarantee
HTTP Strict Transport Security (HSTS) tells browsers to always use HTTPS for your domain — even before the first connection. Submit to the HSTS preload list and your domain is hard-coded into Chrome, Firefox, and Safari as HTTPS-only. There is no way for an attacker to downgrade the connection to plain HTTP.
Airfree Clouds automatically sets the correct Strict-Transport-Security header on your DNS-managed sites. When you're ready, we walk you through submitting to hstspreload.org — a process that is permanent and requires a minimum 1-year max-age, so we make sure you understand the commitment first.
Compare
All certificate types at a glance
Choose by validation level and trust requirement. All certificates use SHA-256 and are issued by globally trusted Certificate Authorities.
| Feature | Free DV | Standard DV | OV | EV | Wildcard |
|---|---|---|---|---|---|
| Validation level | Domain (DV) | Domain (DV) | Organization (OV) | Extended (EV) | Domain (DV) |
| Use case | Personal/dev | Small biz | E-commerce / SaaS | High-trust | Multi-subdomain |
| Price | Free | $39/yr | $79/yr | $149/yr | $79/yr |
| Browser indicator | Padlock | Padlock | Padlock + org info | Padlock + name | Padlock |
| Issuance time | Minutes | Minutes | 1–3 days | 3–5 days | Minutes |
| Warranty | — | $10 000 | $250 000 | $1 750 000 | $50 000 |
| Wildcard subdomains | No | No | No | No | Yes |
| Auto-renewal | Every 90 days | Yes | Yes | Yes | Yes |
Installation
Up and running in three steps
No command-line knowledge required. For sites on Airfree DNS, the entire process is handled automatically.
Order and verify
Choose a certificate type, provide your domain or CSR, and complete the required validation. DV certs validate instantly via DNS or HTTP file. OV and EV require document review by the CA.
Install in one click
For domains hosted on Airfree Clouds DNS, we install the certificate automatically. For external hosts, download the PEM bundle and follow the guide for your stack — Nginx, Apache, Caddy, Node, and more.
Stay secure automatically
Auto-renewal triggers 30 days before expiry. For Let's Encrypt certificates, renewal is fully silent — no action needed. For paid certs, we notify you and can renew with one click from the Control Panel.
Compatible with
- Nginx
- Apache
- Caddy
- Node.js / Express
- Cloudflare Workers
- cPanel / Plesk
Every site deserves HTTPS
Start with free Let's Encrypt SSL, or choose a higher-assurance certificate for your business. No technical knowledge required — we handle the complexity.