Let's Encrypt SSL Setup

Yes, Let's Encrypt uses the same encryption as paid DV SSL certificates. Technical encryption (256-bit AES, 2048-bit RSA) is identical. The difference is the validation type: Let's Encrypt issues only DV (Domain Validation) certificates that confirm you control the domain. Paid OV (Organization Validation) and EV (Extended Validation) certificates additionally verify the organization identity and show the company name in the browser. For most sites, DV is sufficient.

Let's Encrypt deliberately uses short lifetimes for security: limits damage if the private key is compromised, forces automation (fewer manual errors) and reduces the need for revocation. Automatic renewal means you do not need to think about expiry. Certbot and cPanel AutoSSL renew certificates automatically 30 days before expiry.

Yes, Let's Encrypt has supported wildcard certificates since 2018. A wildcard cert covers all subdomains (*.yoursite.com): blog.yoursite.com, shop.yoursite.com, mail.yoursite.com etc. To issue a wildcard cert you must use DNS-01 challenge (not HTTP-01). With Certbot: sudo certbot certonly --manual --preferred-challenges dns -d yoursite.com -d *.yoursite.com. You must add a DNS TXT record for verification.

The easiest way: visit your site and look at the browser address bar. If you see a padlock (lock icon) and the URL starts with https://, you have an active SSL. Click the padlock for certificate details (issuer, expiry). For deeper analysis, use the SSL Labs test (ssllabs.com/ssltest) or the BeoHosting SSL Checker tool (/tools/ssl-checker) which verifies validity, configuration and potential problems.

Yes, all BeoHosting packages include a free Let's Encrypt SSL with automatic renewal. SSL is automatically activated for all domains on your account via cPanel AutoSSL. You do not need to configure anything — SSL is active from the moment the domain starts pointing to our server. For OV or EV certs we also offer paid SSL options on our SSL Certificates page.