Overview
You can add two types of SSL certificates to your domain in the DreamHost panel: a free, auto-renewing Let's Encrypt certificate, or a third-party certificate that you purchase separately and install manually.
FAQs
What do I need to do to add an SSL certificate?
Adding a certificate is only the first step in the process of making your site secure. In order to see a secure padlock in your browser’s address bar, you must also complete each of the following steps:
- Add a valid SSL certificate to the site (described in the following sections).
-
Adjust any settings in your website so it will function with an SSL certificate.
This is usually only necessary for some CMS software solutions, such as WordPress sites.
- Fix any insecure resources or links on your site.
What types of SSL certificates can I use?
There are two types of SSL certificates you can add to your domain within the DreamHost panel:
- Let's Encrypt SSL (FREE)
- Third-party SSL (Previously purchased certificates can be installed manually in the panel)
Can I use a wildcard certificate?
Wildcard certificates are currently not supported.
How long will it take for HTTPS to work after I add a certificate?
Let's Encrypt installations can take 10-30 minutes.
Adding an SSL certificate
- Navigate to the Secure Certificates page. A list of your domains display.
- Click the Add button to the right of the domain.
- On the next page, select a free Let's Encrypt certificate.
Option #1 — Let's Encrypt SSL (FREE)
Let's Encrypt is the SSL solution supported by DreamHost. This type of certificate provides industry-standard encryption trusted by modern browsers and is suitable for all websites, including eCommerce and sites that require a customer login.
Let's Encrypt certificates are also automatically renewed every 60 days.
Option #2 — Third-party SSL
Below is a list of Certificate Authorities from which you may also purchase a third-party SSL certificate.
Please note that the specifications for all SSL certificates are NOT the same. You have to compare features as well as prices to see what's the best value.
CSR
Make sure to copy the Certificate Signing Request (CSR) in your panel and use it when purchasing your third-party SSL certificate from another Certificate Authority. See this article for further details.
CAA records
CAA records can be created by a website owner to specify which Certificate Authorities (CAs) are permitted to issue SSL certificates for a domain. See this article if you'd like to add CAA records to your domain before purchasing an SSL certificate.