Get a free TLS certificate with Let's Encrypt
Install certbot, issue a cert, and auto-renew — your site speaks HTTPS in 5 minutes.
Let's Encrypt issues free 90-day TLS certificates. The certbot tool automates issuance, configuration, and renewal. The whole flow takes 5 minutes for a typical nginx setup.
Install certbot
On Ubuntu 22.04+:
apt install certbot python3-certbot-nginx -yOn AlmaLinux/Rocky:
dnf install certbot python3-certbot-nginx -yRun the certbot wizard
certbot --nginx -d example.com -d www.example.comIt prompts for an email (used for expiry warnings) and TOS acceptance. It then issues the cert, configures nginx, and reloads the service.
Verify auto-renewal
certbot renew --dry-runThe certbot package installs a systemd timer that runs twice daily and renews any cert within 30 days of expiry. No further action needed.
Optional: tighten TLS
Edit your nginx server block to add modern TLS configuration: TLS 1.2/1.3 only, strong ciphers, HSTS header. Use https://ssl-config.mozilla.org/ to generate a tested config.
Deploy your first offshore server in 60 seconds.
Anonymous signup. Bitcoin & Monero accepted. Provisioned across 8 jurisdictions.
No credit card required · 7-day money-back guarantee