You can install a free SSL certificate in DirectAdmin in under five minutes by enabling Let's Encrypt directly from the control panel. No purchase required, no command line needed.
This guide walks you through the exact steps, common errors to avoid, and how to confirm that HTTPS is properly configured.
What Is Let's Encrypt and Why Use It in DirectAdmin?
Let's Encrypt is a non-profit certificate authority that issues free, automated SSL/TLS certificates. DirectAdmin has included native Let's Encrypt support for several years, meaning you can activate it with a few clicks from the user panel.
The concrete benefits:
- Zero cost — just as valid as a paid certificate for informational and small-business sites.
- Automatic renewal every 90 days — DirectAdmin handles renewal without any action on your part.
- Compatible with all modern browsers.
- Enables the padlock icon and HTTPS, improving your SEO ranking signals.
If your hosting plan includes DirectAdmin, Let's Encrypt is likely already available at no extra charge. Check with your provider if you don't see it in the panel.
Prerequisites Before Installing SSL
Before clicking "install," verify these points to avoid errors:
- DNS pointing to the server: Your domain's A records (including
www) must point to the IP address of the server where your hosting lives. Let's Encrypt validates the domain via HTTP before issuing the certificate. - Domain active on the account: The domain must be configured as the main domain or an addon domain within your DirectAdmin account.
- Port 80 accessible: The server must be able to receive requests on port 80 during validation. If you use a firewall or CDN, make sure it isn't blocking this.
Once these are confirmed, you're ready to proceed.
Steps to Install Free SSL in DirectAdmin
Step 1: Log in to Your DirectAdmin Panel
Go to yourdomain.com:2222 (or the URL your hosting provider gave you) and log in with your username and password. If your provider uses a different port, check the welcome email.
Step 2: Navigate to the SSL Section
In the user panel, find the Advanced Features section or the SSL Certificates icon directly. In newer versions of DirectAdmin with the Evolution interface, you can also search for "SSL" in the sidebar menu.
Step 3: Select Let's Encrypt
Inside the SSL Certificates screen, you'll see several tabs or sections:
- Paste a pre-generated certificate — for externally purchased certificates.
- Free & automatic certificate from Let's Encrypt — this is the one you need.
Select the Let's Encrypt option.
Step 4: Configure the Certificate
You'll see a form with important options:
| Option | Recommendation |
|---|---|
| Main domain | Check (always) |
| www.yourdomain.com | Check — covers the www version |
| mail.yourdomain.com | Optional — only if you use SSL-secured mail |
| Include in server certificate | Leave at default |
At minimum, check both the root domain and the www version. Click Save or Request Certificate.
Step 5: Wait for Issuance (30–60 seconds)
DirectAdmin communicates with Let's Encrypt's servers, validates that the domain correctly points to the server, and issues the certificate. In most cases this takes less than a minute.
If the process fails, you'll see an error message. The most common errors:
- "DNS problem": The domain hasn't propagated yet. Wait between 30 minutes and 24 hours depending on your TTL and try again.
- "Too many certificates": Let's Encrypt limits you to 5 certificates per domain per week. Wait the indicated time.
- "Connection refused on port 80": The server or a firewall is blocking the validation request.
Step 6: Force HTTPS to Redirect Traffic
Installing the certificate does not automatically redirect visitors from HTTP to HTTPS. To do that, you have two options:
Option A — From DirectAdmin: In the same SSL section, look for the Force SSL with https redirect checkbox and enable it.
Option B — From your .htaccess file: Add these lines at the top of your .htaccess in the site root:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Either option will automatically redirect all HTTP visitors to the secure version of your site.
Verifying the Certificate Was Installed Correctly
Once installed, open your site in a browser and check:
- A closed padlock icon in the address bar.
- The URL begins with
https://. - No security warnings appear.
For a more thorough check, use external tools like SSL Labs or your hosting provider's built-in checker. You'll find more guides on SSL verification and troubleshooting in our SSL security section.
Also verify that no site resources (images, scripts, stylesheets) are still loading over HTTP — that triggers "mixed content" warnings even when the certificate is active.
Key Takeaways
- Let's Encrypt provides free, valid SSL certificates that are perfect for the vast majority of websites.
- DirectAdmin includes native support — just go to SSL Certificates and choose the Let's Encrypt option.
- Before installing, confirm your DNS points to the server and the domain is active in your account.
- After installing, enable the HTTP-to-HTTPS redirect so all visitors use the secure version.
- The certificate renews automatically every 90 days — no action required.
Does your hosting plan not include DirectAdmin, or do you need an SSL with a higher validation level for your business or online store? The team at elenlace.com can help you choose and install the right certificate for your specific situation.
FAQ
Is a Let's Encrypt SSL certificate as secure as a paid one?
Yes, in terms of encryption and technical validity. The difference lies in the validation level: Let's Encrypt issues DV (Domain Validation) certificates, which confirm you control the domain. Paid OV and EV certificates also validate the organization's identity, which is required in certain industries.
How often do I need to renew the certificate in DirectAdmin?
Let's Encrypt certificates are valid for 90 days, but DirectAdmin renews them automatically a few days before expiry. Under normal conditions, you don't need to do anything manually.
Can I install SSL on a subdomain too?
Yes. When configuring the certificate in DirectAdmin, you can include any subdomains you need in the same form. If you have many subdomains, consider a wildcard certificate (which covers all of them), though that type requires DNS validation and may have a cost.
What if DirectAdmin doesn't show the Let's Encrypt option?
It means the Let's Encrypt plugin hasn't been enabled on the server. Contact your hosting provider's support team to have it activated — it's a server administrator configuration, not a user-level setting.
Prefer it done for you? El Enlace handles hosting and professional web development.
Compare providers
Other providers and guides worth comparing:
