HTTPS (SSL) protection

We offer installation of SSL certificates and therefore HTTPS protection on our webhosting plans.

You can both order your SSL certificate through us, import your own certificate, or use Let’s Encrypt.

Read more about HTTPS protection of webhosting under the “Website” menu item in our control panel.

¶Activating HTTPS protection

After you have received your SSL certificate, you must, under the “Website” and “HTTPS Protection” menu items in the control panel, apply your SSL certificate to the host name you wish to protect with HTTPS.

¶Redirecting to HTTPS

After activating HTTPS protection your site will respond to both “http://” and “https://” calls.

If you want to automatically redirect to HTTPS, this can be done by enabling “Force HTTPS”, also under HTTPS Protection in the control panel.

¶Insecure elements (Yellow lock – Grey URL)

When you have enabled HTTPS on your site, it is important that, in your HTML code, you only fetch content from https:// pages, otherwise the browser will show a warning.
If you see a yellow lock in your browser, you should therefore review your HTML code for insecure (http://) elements.
See e.g. https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content/How_to_fix_website_with_mixed_content

¶HTTPS on subdomains

You need an SSL certificate for each subdomain you wish to protect.

¶Generating a CSR request

If you order the SSL certificate through us, we will create your CSR request and private key.

You can also order your SSL certificate through a third party, but then you yourself or the provider must create the CSR request for you. Unfortunately we cannot help with that part. You may use https://csrgenerator.com/

Importing a certificate can be done in OpenSSL (PEM, x509, Apache‑ModSSL) format.

¶Renewal of SSL certificates

An SSL certificate cannot be renewed as such. Instead you must order a new certificate for the same host name as the previous one, and replace the old certificate with the new one. When the new certificate is validated and issued, you can put it into use by activating it under “HTTPS Protection”, and then delete the old certificate.

When the certificate is validated and issued you then need to remove the old one, after which you can make the new certificate active.

In the control panel under Website > HTTPS Protection you can click “Remove HTTPS Protection” and then you can afterwards select the certificate in the dropdown menu.

¶Let’s Encrypt

You can set up Let’s Encrypt directly via our control panel, under Website > HTTPS Protection.
In the dropdown menu next to the host name you want to protect you can simply select “Let’s Encrypt DV‑certificate”.

For Let’s Encrypt to be usable, the domain must point directly to a Simply.com web server and the /.well-known/ folder must work, and must for example not redirect elsewhere. When you set up Let’s Encrypt through our Control Panel, our system will check that this is not the case and will only allow you to activate Let’s Encrypt provided the above is satisfied and thus ensure Let’s Encrypt will work.