--- title: "How to Install an SSL Certificate (HTTPS) | GlobalHostia" url: "https://globalhostia.com/guides/install-ssl" description: "Install SSL on your website: turn on the free certificate, or generate a CSR, validate and install a paid one, then force HTTPS and fix mixed content warnings." source: "GlobalHostia; prices are synced from the billing system and exclude any taxes shown at checkout" --- Guide # How to install an SSL certificate Turn on the free SSL that comes with hosting, or install a paid DV, OV or EV certificate, then force HTTPS and fix mixed content. 6 minute read · Prices on this page are live from our billing system ## On this page 1. [Which certificate do you need?](#types) 2. [Install SSL step by step](#steps) 3. [Check it worked](#check) 4. [Questions](#ln-faq-h) Rather ask a person? [WhatsApp our team](https://wa.me/971507341578?text=Hello%20GlobalHostia%2C%20I%20have%20a%20question%20about%20%22How%20to%20install%20an%20SSL%20certificate%22.) ## Which certificate do you need? SSL certificate types compared | Type | What is checked | Good for | | --- | --- | --- | | Free (DV) | Control of the domain | Most websites and blogs; included with hosting | | Paid DV | Control of the domain | Sites on other servers, longer support, warranty | | Wildcard | Control of the domain | One domain and all its first-level subdomains | | OV | The domain and your organisation | Businesses that want their company name in the certificate | | EV | Extended checks on your organisation | Payments and finance, where the strongest checks are expected | Paid certificates start at **$0.00 / year** today. [Compare SSL certificates](https://globalhostia.com/ssl-certificate) ## Install SSL step by step 1. ### Check the free certificate first Every hosting plan includes a free domain-validated certificate. In the control panel, open the SSL/TLS status page and make sure the domain and www are covered. If not, run the check again once DNS points to us. 2. ### For a paid certificate, generate a CSR A Certificate Signing Request contains your domain and organisation details. Create it in the control panel’s SSL/TLS section, or on your server: ` openssl req -new -newkey rsa:2048 -nodes \ -keyout yourdomain.key -out yourdomain.csr ` Keep the .key file private; it never leaves your server. 3. ### Order and validate Paste the CSR when ordering. Domain validation is done by email, a DNS TXT record or a file on your site; organisation and extended validation also check your company records. 4. ### Install the certificate Paste the issued certificate and the CA bundle (intermediate certificates) into the control panel’s Install SSL page, next to the private key. On your own server, add the files to the web server configuration and reload it. 5. ### Force HTTPS Redirect every http:// request to https://. On Apache, in `.htaccess`: ` RewriteEngine On RewriteCond %{HTTPS} off RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301] ` 6. ### Fix mixed content Open the browser console and look for images, scripts or styles still loaded over http://. Update those links, or in WordPress set both site addresses to https:// and search-replace the old URL in the database. ## Check it worked - The padlock shows on every page, including checkout and login. - http:// and www addresses redirect to the same https:// address. - The certificate covers every hostname you use, and you know its expiry date. ## More hosting guides - [How to move a website to Globalhostia](https://globalhostia.com/guides/move-website-to-hostia) - [How to point a domain or change nameservers](https://globalhostia.com/guides/change-nameservers) - [How to set up business email on your domain](https://globalhostia.com/guides/business-email-setup) - [How to install WordPress](https://globalhostia.com/guides/install-wordpress) [All hosting guides](https://globalhostia.com/guides) **Price-lock**your renewal price never goes up **30-day money-back on shared hosting** - [**Free website migration**](https://globalhostia.com/free-migration) **24/7 engineers by ticket & WhatsApp** ## How to install an SSL certificate: questions ### Yes. Every hosting plan includes a free domain-validated certificate. Paid certificates add organisation validation, wildcard coverage, a warranty and a site seal. ### ### ### ## Not sure which plan you need? Answer four questions and get a recommendation from our live plans, or let our engineers move your site for free. [Open the plan finder](https://globalhostia.com/plan-finder)[Free website migration](https://globalhostia.com/free-migration)