# Issuing SSL Certificates via Certbot

You can issue a free SSL Certificate signed by Let's Encrypt; a non profit organization, using **Certbot**. It's a free, open-source software tool that helps website administrators obtain and install SSL/TLS certificates.

Its primary purpose is to enable HTTPS on websites by automating certificate issuance, installation, and renewal.

#### Install Certbot from the command terminal

<p class="callout info">The commands provided are compatible with Ubuntu 22.04, CentOS uses `<span class="editor-theme-code">yum</span>`, and AlmaLinux uses `<span class="editor-theme-code">dnf</span>`.</p>

**1.** Update system packages

```bash
sudo apt update
```

**2.** Install Certbot and its related plugin

```bash
sudo apt install -y certbot python3-certbot-nginx
```

**3.** If above command succeed without error, check version

```bash
certbot --version
```

If you see an up-to-date version (e.g. `<span class="editor-theme-code">certbot 1.32.0</span>`), you may proceed.

#### Issuing SSL certificates using Certbot

**1.** Make sure your site is accessible over HTTP. Open your domain (e.g. `<span class="editor-theme-code">example.com</span>`) in a browser. Certbot verifies domain ownership via **port 80**.

**2.** Run Certbot

```bash
sudo certbot --nginx
```

During the setup process, Certbot will do the following:

- Detect virtual hosts present
- Prompt you to choose the domain of your choice
- Automatically configure HTTPS

<p class="callout info">Certbot will also modify your Nginx/Apache config to add an HTTPS redirect.</p>

Test your setup. Open your website in a browser! if everything works, you’ll see a padlock icon and the `<span class="editor-theme-code">https://</span>` prefix.

If you'd like, you can also test via the command line:

```bash
curl -I https://example.com
```

#### Automatic renewal information

By default, Certbot installs a cron job or `<span class="editor-theme-code">systemd-timer</span>` for automatic certificate renewal. You can test the renewal manually by running the command in the terminal below.

```bash
sudo certbot renew --dry-run
```

If you see a return of `<span class="editor-theme-code">Congratulations, all renewals succeeded</span>`, everything is OK and working as intended.

Your site is now protected with a free SSL certificate from Let’s Encrypt, and Certbot will automatically manage renewals when needed.

<details id="bkmrk-about-this-articlewr"><summary>About this article</summary>

- Written by [Gary Phatt](https://foundry.theopenroad.cloud/user/gary-phatt), a TheOpenRoad Support employee.
- Still need help? Please write to us in the comment section below or [contact TheOpenRoad support](https://theopenro.ad/inquire).

---

![image.png](https://foundry.theopenroad.cloud/uploads/images/gallery/2026-10/scaled-1680-/Pb3qkbU7oacVfqRn-image.png)

#### **Please rate your experience with this article today:**

When you select a number, *1 being the lowest and 9 being the highest*; the page will refresh and your feedback will be submitted to TheOpenRoad.

## [**1**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**2**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**3**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**4**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**5**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**6**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**7**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**8**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot) [**9**](https://foundry.theopenroad.cloud/books/theopenroad-cloud/page/issuing-ssl-certificates-via-certbot)

</details>