How to Get a Free SSL Certificate with Let's Encrypt

Disclosure: this page contains affiliate links. If you buy through them we may earn a commission at no extra cost to you.

Let’s Encrypt issues free, trusted TLS certificates that auto-renew — no more paying for SSL. Here’s how to set it up on Ubuntu with Nginx.

Step 1: Install Certbot

sudo apt update
sudo apt install -y certbot python3-certbot-nginx

Step 2: Point your domain first

Certbot needs your domain’s A record pointing at the VPS IP, and an Nginx server block with the correct server_name.

Step 3: Issue the certificate

sudo certbot --nginx -d example.com -d www.example.com

Certbot edits your Nginx config to enable HTTPS and add an HTTP-to-HTTPS redirect.

Step 4: Confirm auto-renewal

sudo certbot renew --dry-run

Certbot installs a systemd timer that renews certificates automatically before they expire.

Tips: keep port 80 open (renewal uses it), and add more domains with the same --nginx -d command. You can also get wildcard certs via a DNS challenge if your DNS provider supports it.

You’ll need root access on a real KVM VPS. RackNerd’s 1 GB plan at $21.99/yr runs Nginx plus Certbot with room to spare.