Free, Standard 1-year SSL certificate

Each domain name or Web Hosting that you purchase from Gandi entitles you to a free 1-year SSL certificate.

These certificates can be created automatically or manually.

Automatic creation

By performing certain operations via your Gandi account, you will automatically generate a free SSL certificate. These operations include :

• When adding a Web forwarding with an HTTPS[¹] starting address: 

The Gandi system will automatically create the SSL certificate needed to set up this forwarding.

Please note: the system will not create a certificate for the "final" forwarding address (the "target" or inbound address). It's up to you, depending on your hosting, to set this up.

• To create a site on a Gandi Web Hosting, visit this tutorial : 

https://docs.gandi.net/en/web_hosting/tutorials/automatic_ssl_installation.html

In the WEB HOSTING / Sites menu.

In the block Secure your website with an SSL strategy, click on "Generate a free SSL Certificate".

Then activate the HTTPS strategy.

Manual creation

For sites hosted elsewhere than at Gandi

Make sure you choose a Standard SSL certificate, Single address for one year (via the SSL CERTIFICATES > Buy section), and the system will automatically reduce the price of the certificate to zero (if it is eligible) during the checkout process (in step 2, after you have chosen the owner of the certificate).

If a domain has already been issued a free certificate, you will be billed for it.

Choose the "Elsewhere" installation option.

Provide your CSR, and if valid, the address you wish to protect will be displayed in the Common Name (CN) field.

The private key was generated at the same time as the CSR. It is therefore stored on your computer in a file in .key format.

[¹] Web forwarding from an HTTPS address has mainly been implemented for .bank and .app extensions, which only allow HTTPS. For other extensions, it's not necessary to set up such a forwarding in order to target SEO on your site's main address.