Skip to content
All tools

Free SSL Certificate

Get a free, publicly trusted certificate from Let's Encrypt for one or more domains. Add one CNAME record for each domain; no account or ACME client is required because CertIntel handles the DNS-01 challenge for you.

How this works

  1. Your private key is generated in this browser tab and never leaves it — or, if you upload your own CSR below, we never see any key material from you at all.
  2. Only the CSR (a public request, no key inside it) is sent to our server.
  3. Our server acts as the ACME client, completing DNS-01 validation with Let's Encrypt and requesting the certificate on your behalf.
  4. The issued certificate is sent back to your browser to view and download.

A wildcard name (*.example.com) covers every direct subdomain but not the bare apex — add example.com separately if you need both.

Runs entirely in your browser. Certificates, keys and passwords you enter here are processed locally with JavaScript and are never uploaded or sent to any server — nothing is stored, logged or transmitted.