Encrypted connections
Logins, contact forms and checkout details travel scrambled between the visitor and your site.
Freewith every HostRomeo hosting plan
Automaticissued, installed and renewed for you
Every domainon your hosting account, plus www
Trustedby all major browsers
Romeoics, explained
How Let’s Encrypt issues your certificate
Let’s Encrypt is a free, automated and open certificate authority run by the non-profit Internet Security Research Group (ISRG). Our servers talk to it using ACME, a standard protocol built for robots, not paperwork. Here’s the conversation, step by step.
HostRomeo serverAutoSSL, our ACME client
yourdomain.comYour website, served by us
Let’s EncryptFree, non-profit certificate authority
1New orderFor
yourdomain.com and www, signed with our ACME account key2Here’s your challengeAn HTTP-01 token: prove you control this domain
3Publish the token
/.well-known/acme-challenge/<token>4Fetch & verifyChecked from several network locations at once
5Finalize with a CSRSends the public key. The private key never leaves our server.
6Certificate issuedSigned and chained up to the ISRG Root X1
7Install & auto-renewHTTPS goes live; renewal is scheduled well before expiry
This whole conversation follows the ACME protocol (RFC 8555) and usually takes seconds. You never have to lift a finger.
Chain of trust
Why browsers believe your padlock
Browsers don’t trust your certificate on its own. They trust a small set of root authorities, and your certificate is signed by a chain that leads back to one of them.
Let’s Encrypt’s ISRG Root X1 ships inside every major browser and operating system. Your certificate is signed by a Let’s Encrypt intermediate, which is signed by that root, so the chain checks out instantly.
ISRG Root X1Let’s Encrypt’s root certificate, built into browsers and operating systems.
Let’s Encrypt intermediateDoes the day-to-day signing, so the root key stays safely offline.
yourdomain.comYour own certificate, installed on your HostRomeo hosting.
Every visit
The TLS handshake, in four beats
Each time someone opens your site over https://, their browser and your HostRomeo server run this handshake in a few milliseconds.
Browser Server
Hello
The visitor’s browser says hi and lists the TLS versions and cipher suites it supports.
Server Browser
Here’s my certificate
Your HostRomeo server replies with your Let’s Encrypt certificate and its intermediate.
Browser checks
Verify the chain
Is the signature valid, does the name match the domain, and is it in date? The chain must lead to a root the browser already trusts.
Both sides
Encrypted session
A fresh session key is agreed, everything sent from now on is encrypted, and the padlock appears.
Set and forget
Short-lived by design, renewed on autopilot
Let’s Encrypt keeps certificates short-lived on purpose: if a key were ever exposed, it would only be useful for a short time. Lifetimes across the industry are getting shorter, and our automation keeps pace, so nothing changes for you.
One certificate’s life on HostRomeo
Today a Let’s Encrypt certificate is valid for 90 days. Renewal kicks in around two-thirds of the way through, long before anything can expire.
Today90 daysLet’s Encrypt’s current default
From Feb 202764 daysIndustry-wide move to shorter lifetimes
From Feb 202845 daysShorter still, and still fully automatic
What you get
Everything the padlock brings
The padlock, not a warning
Browsers show your site as secure instead of flagging it as “Not secure”.
Search-friendly
Google uses HTTPS as a ranking signal, and modern browser features need a secure connection.
Zero maintenance
No CSRs to generate, no files to upload and no renewal reminders to chase.
FAQ
SSL questions, answered
Is the SSL certificate really free?
Yes. Every domain hosted on a HostRomeo hosting plan gets a free Let’s Encrypt SSL certificate. There is nothing extra to buy and no renewal fee.
Do I need to install anything?
No. Point your domain to your HostRomeo hosting and the certificate is requested, validated and installed for you automatically. Renewals happen in the background too.
Which names are covered?
Your main domain and its www version, plus the addon domains and subdomains you host on your HostRomeo account, as long as they point to our servers.
Why does a Let’s Encrypt certificate expire so quickly?
Short lifetimes limit the damage if a key is ever exposed and keep the web’s security moving. Let’s Encrypt certificates last 90 days today, and the whole industry is moving to shorter lifetimes. Because renewal is automatic, you never have to think about it.
Is the encryption as strong as any other certificate?
Yes. Let’s Encrypt certificates are trusted by all major browsers and use the same TLS encryption standards as any other publicly trusted certificate.
My site still shows “Not secure”. What now?
Check that your domain points to your HostRomeo hosting, then make sure your site loads its pages, images and scripts over https://. If it still isn’t right, open a ticket and Romeo will sort it out.
Get yours for ₹0
Pick a hosting plan. The SSL is on Romeo.
The free Let’s Encrypt certificate comes with HostRomeo hosting. Choose the plan that fits, point your domain, and your padlock appears automatically.
Shared Hosting
The easiest way to get a fast, secure website online.
- Free Let’s Encrypt SSL on every domain
- cPanel control panel
- Real 24/7 support
WordPress Hosting
Tuned for WordPress, with HTTPS ready from day one.
- Free Let’s Encrypt SSL on every domain
- Built for WordPress speed
- Real 24/7 support
Cloud Hosting
More power and room to grow for busy sites.
- Free Let’s Encrypt SSL on every domain
- Scalable cloud resources
- Real 24/7 support
Your padlock is one plan away
Free SSL, set up and renewed automatically, with every HostRomeo hosting plan. Made with lots of Romeoics.
