跳转到主要内容

SSL 证书

每个套餐免费送 SSL,需要时随时升级

我们托管的每个站点都有一张免费、自动续期的 SSL 证书——当你想向外界证明自己究竟是谁时,付费的 OV 与 EV 方案随时待命。

$0

每个套餐免费 SSL

自动

签发与续期

256-bit

加密强度

$1.5M

EV 保额

为何重要

加密、信任与那把小锁,一次搞定

SSL 证书的作用不只是打个勾。它保护你的访客,也向外界表明这个站点可以放心使用。

代表 SSL 证书加密与网站信任的挂锁图标

访客信任的那把小锁

浏览器会在 HTTPS 站点上显示一把小锁。没有有效证书,访客看到的就是「不安全」警告。

传输全程加密

登录信息、表单内容和支付数据在浏览器与我们服务器之间被打乱加密,途中谁也读不到。

自动续期

证书会在到期前自动重新签发,你不会某天醒来发现锁没了、结账坏了。

一个低调的 SEO 信号

搜索引擎更青睐安全页面,HTTPS 让你的排名比未加密的对手略微领先一点。

验证过的身份

EV 证书能证明你的企业确实名副其实,把经过核验的公司名称写进证书里——涉及金钱往来时,这份安心尤其重要。

几分钟就生效

域名一解析到我们这里,免费证书就自动开通。没有什么要买,也没有什么要装。

Free SSL certificate securing a website

免费包含

每个套餐都送 SSL,没有小字附注

我们卖出的每个主机套餐都附带一张免费 SSL 证书——共享主机、WordPress、代理、VPS 和独立服务器一视同仁。它自动开通,覆盖你的域名及其子域名,并自行续期,让那把小锁永不失效。

  • 覆盖每个域名与子域名,自动生效
  • 域名解析成功即刻签发
  • 到期前自动为你续期
  • 没有只优惠首年的定价套路
Website security and DDoS protection

高级证书

升级到通配符或 EV 证书

当免费 SSL 不够用时,就选一张付费证书。通配符用一张证书守住所有子域名,而 EV 会把经过核验的企业名称写入证书详情——对网店、会员站和任何处理敏感数据的站点来说,这份信任感格外重要。

  • 域名验证型(DV)证书
  • 通配符覆盖所有子域名
  • 扩展验证(EV)带来最高信任度
  • 保额最高可达 150 万美元

购买证书

高级 SSL 证书

免费 SSL 已包含在每个主机套餐中。当你需要通配符、扩展验证或有保额兜底的证书时,再加购下列之一。

DV SSL Certificate

Fast domain-validated encryption for any site

$59.99/yr

renews at the same price · issued in minutes

Validation
Domain (DV)
Issued
Usually same day
Warranty
$10,000
Secures
1 domain
  • Domain-validated encryption
  • Padlock and HTTPS in the address bar
  • Trusted by every major browser
  • $10,000 relying-party warranty
  • A positive Google ranking signal
  • Free installation help from support
订购 SSL
Most Popular

Wildcard SSL Certificate

Secure a domain and all its subdomains

$169.99/yr

renews at the same price · covers every subdomain

Validation
Domain (DV)
Issued
Usually same day
Warranty
$10,000
Secures
*.yourdomain
  • One certificate for every subdomain
  • Wildcard *.yourdomain coverage
  • Padlock and HTTPS on every subdomain
  • $10,000 relying-party warranty
  • Ideal for apps with many subdomains
  • Free installation help from support
订购 SSL

EV SSL Certificate

Maximum trust with a vetted business identity

$379.99/yr

renews at the same price · highest assurance

Validation
Extended (EV)
Issued
1–3 days
Warranty
$1,500,000
Secures
1 domain
  • Extended Validation of your business
  • Your verified company name in the cert
  • The strongest trust signal available
  • $1,500,000 relying-party warranty
  • Reassurance for checkouts and logins
  • Guided validation from our team
订购 SSL

证书在付款后签发——我们团队会替你完成验证和安装,DV 通常当天搞定,EV 则需要几天。

使用流程

默认即安全,什么都不用装

主机服务器上的 SSL 证书自动安装流程
1

把域名解析到我们这里

在账户里添加域名,让 DNS 解析到我们的服务器——你要做的就这一步。

2

我们自动签发

域名一通过验证,免费 SSL 就自动申请并安装完毕。不用点击,也没有配置文件。

3

安全全自动维持

证书会在到期前自行续期,HTTPS 和那把小锁一直有效,你完全不必挂心。

包含内容

你的 SSL 都带些什么

  • 每个套餐都含免费 SSL
  • 自动签发与安装
  • 覆盖你的域名及子域名
  • 全自动续期,无需过问
  • 可开启强制 HTTPS 跳转
  • 现代 TLS 1.3 加密
  • 可升级 DV、通配符与 EV
  • 受所有主流浏览器信任
  • 没有隐藏的证书费用
  • 24/7 真人技术支持

常见问题

SSL 证书常见问题

每个套餐的 SSL 真的免费吗?

是的。每个主机套餐都含一张免费 SSL 证书,不另外收费,只要站点还托管在我们这里,就一直自动签发并自动续期。

免费 SSL 和付费证书有什么区别?

免费证书能加密流量并显示小锁标志。付费证书还能多做几件事:通配符用一张证书守住所有子域名,而 EV 证书增加了对企业身份的严格核验,浏览器和客户都会视其为更强的信任信号。

访客会看到那把小锁吗?

SSL 一旦生效,浏览器就会显示小锁标志并通过 HTTPS 加载你的站点。没有有效证书的站点,如今则会在地址栏触发「不安全」警告。

我需要手动续期证书吗?

不用。免费证书会在到期前自行续期。付费的通配符与 EV 证书,我们会在验证窗口开始前提醒你,确保防护不留空档。

SSL 会拖慢我的网站吗?

影响小到察觉不出。现代 TLS 已高度优化,而且 HTTP/2 和 HTTP/3 本就要求 HTTPS——这两个协议反而让大多数站点更快。

一张证书能覆盖我的子域名吗?

可以。我们的免费证书覆盖主域名及其子域名;如果你的子域名数量很多,也有通配符方案可选。

把访客的信任牢牢锁住。

每个套餐都附带免费、自动续期的 SSL——当你需要证明自己的身份时,高级 EV 或 OV 证书随时可用。

查看主机套餐

The Full Picture

A green padlock is table stakes now — the harder questions are what happens to your certificate when you switch hosts, why a site can still flash 'Not secure' after SSL is installed, and which validation level actually matches the traffic you get. This page fills in that operational detail rather than repeating the basics.

Every plan we sell — web hosting from $2.42/mo, managed WordPress from $4.19/mo, VPS from $9.99/mo and dedicated servers from $149.99/mo — ships with free, auto-renewing SSL as standard, backed by 24/7 human support and a 30-day money-back guarantee if a premium certificate purchase turns out not to be the right fit.

Deep Dives

The details behind the promises

DV, OV and EV: what the validation levels actually check

A domain-validated (DV) certificate confirms one thing: that whoever requested it controls the domain. That's why free certificates issue in moments — there's no paperwork, just a DNS or file check. Organization-validated (OV) and Extended Validation (EV) certificates add a real verification step, where the certificate authority checks business registration records and confirms the company by phone before issuing anything.

That extra check is why EV certificates carry the deeper warranty — up to $1.5 million in our cover — and why they're worth the wait for stores, membership sites or anything handling sensitive customer data. DV is the right default for a blog or brochure site; OV and EV earn their keep once real transactions and real trust are on the line.

Keeping HTTPS unbroken when you migrate to us

Free managed migration doesn't stop at copying files and databases — it's timed so a fresh free SSL certificate is requested and issued the moment your domain resolves to our servers, closing the gap between the old host's certificate and ours before visitors ever notice a difference.

That matters most for stores and login-gated sites, where even a short HTTPS gap can trip browser warnings or break a checkout flow mid-migration. Coordinating the DNS cutover and the certificate issuance together is a standard part of the migration, not an extra step you have to request.

Diagnosing a stubborn 'Not secure' warning

SSL being active doesn't always mean the warning disappears. Mixed content — a page served over HTTPS that still loads an image, script or stylesheet over plain HTTP — is the usual culprit, and it often traces back to a theme, plugin or old database entry hardcoding an http:// link from before SSL was switched on.

24/7 human support can scan for those stray references and help configure a forced HTTPS redirect so every request, including old bookmarked links, is upgraded automatically rather than left to trigger the warning again on the next page load.

SSL, checkout pages and PCI-friendlier stores

Encrypting data in transit is one of the baseline requirements card processors expect under PCI DSS, and every plan's HTTPS covers that piece for checkout, login and account pages by default — no separate certificate purchase needed just to meet it.

SSL alone doesn't make a store fully PCI compliant; that also depends on how the payment processor and cart software handle card data. What our NVMe SSD and LiteSpeed stack does add is speed — checkout pages stay fast even with the extra handshake overhead HTTPS introduces, so encryption doesn't come at the cost of a slower cart.

Developer coding on a web hosting server

Installing wildcard and EV certificates without the guesswork

Ordering a premium certificate isn't a self-service form you're left to figure out. Our team generates the certificate signing request, submits it to the certificate authority, and — for EV — walks you through exactly which business documents the validation call will ask for.

Installation includes the full intermediate certificate chain, not just the leaf certificate — a detail that causes 'certificate not trusted' errors on some mobile browsers when it's missed. We confirm the chain validates cleanly across major browsers before marking the order complete.

  • CSR generated and submitted on your behalf
  • Guidance on documents needed for EV verification
  • Full intermediate certificate chain installed
  • Cross-browser validation checked before sign-off

More Reasons

Built to help you grow

Migration-safe HTTPS

Free managed migration times certificate issuance to your DNS cutover so HTTPS doesn't lapse mid-move.

Mixed-content troubleshooting

24/7 support helps track down stray HTTP images or scripts still triggering a broken padlock.

Store-ready encryption

Checkout and login pages run over HTTPS by default, covering the encrypted-transit requirement stores need.

Reseller wildcard coverage

A wildcard certificate secures every subdomain of a domain, useful for staging, shop and portal areas under one account.

Modern protocol groundwork

HTTPS unlocks HTTP/2 and HTTP/3 on our LiteSpeed stack, so security and speed improve together.

Guarantee-backed upgrades

Premium wildcard and EV certificates are covered by the same 30-day money-back guarantee as hosting.

Getting Started

How to get going

1

Pick the validation level you need

Choose DV, wildcard or EV at checkout based on how many subdomains you run and how much identity assurance your visitors expect.

2

Complete verification if required

EV certificates need a short business verification step; our team explains exactly which documents the certificate authority will ask for.

3

We install and confirm the chain

The certificate and its full intermediate chain are installed, then checked for clean validation across major browsers before we call it done.

Good To Know

What's covered

  • SSL details carried over during free managed migrations
  • Mixed-content diagnostics from 24/7 human support
  • Full intermediate certificate chain installed, not just the leaf cert
  • Wildcard coverage available for staging and subdomain areas
  • HTTPS groundwork for HTTP/2 and HTTP/3 speed gains
  • 30-day money-back guarantee on premium certificates
  • Checkout pricing shown in your local currency via geo-currency detection
  • Billed and operated by Bohzo Ltd (UK)

More FAQ

More questions, answered

What happens to my SSL certificate when I migrate to Hosting Cheap?

Our free managed migration times a fresh certificate to issue the moment your domain resolves to our servers, so there's no gap between your old host's SSL and ours. Files, databases and DNS move alongside it, coordinated so HTTPS keeps working through the cutover.

Why does my site still show 'Not secure' after installing SSL?

This is almost always mixed content — a page served over HTTPS still pulling an image, script or stylesheet over plain HTTP, often from an old hardcoded link. Our 24/7 support team can help locate the offending references and set up a forced HTTPS redirect to prevent it recurring.

Can one wildcard certificate cover multiple client sites on a reseller account?

A wildcard certificate covers every subdomain of a single domain — for example shop.yoursite.com and staging.yoursite.com — but it doesn't extend across separate client domains. Each client domain on a reseller account still needs its own certificate, though free SSL issues automatically for all of them.

Does SSL make my store PCI compliant?

SSL covers the encrypted-transit requirement that PCI DSS expects, and every plan includes it on checkout and login pages by default. Full PCI compliance also depends on how your payment processor and cart software handle card data, so SSL is a necessary piece rather than the whole picture.

What's the real difference between DV, OV and EV certificates?

DV only confirms domain control, which is why free certificates issue instantly with no paperwork. OV and EV add an actual business verification step — the certificate authority checks registration records and confirms the company by phone — which is why EV carries a deeper warranty, up to $1.5 million in our cover.

Is there a guarantee if I buy a premium certificate and change my mind?

Yes. Premium DV, wildcard and EV certificate purchases are covered by the same 30-day money-back guarantee as our hosting plans, so there's no risk in stepping up from free SSL if it turns out you didn't need the upgrade.