SSL & Security

How to Enable Free SSL on Your Domain

4 min read HostGridPro™ HestiaCP

Every HostGridPro™ hosting plan includes free Let's Encrypt SSL certificates. Here is how to enable the padlock, force HTTPS and fix common SSL issues.

1 Enable SSL in HestiaCP

Log in to HestiaCP at https://yourdomain.co.za:8083. Click Web → click the Edit icon for your domain. Scroll down to SSL Support and tick:

Click Save. HestiaCP will automatically request and install your SSL certificate. This usually takes 30–60 seconds.

Your domain must be pointing to HostGridPro™ servers before SSL will issue. If SSL fails, check your DNS first. See DNS guide →

2 Force HTTPS

After SSL is enabled, force all visitors to use the secure HTTPS version. In HestiaCP, tick Force SSL in your domain settings. Or add this to your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

For WordPress sites, install the plugin Really Simple SSL and it forces HTTPS automatically with one click.

3 Auto-Renewal

Let's Encrypt certificates expire every 90 days. HestiaCP automatically renews them in the background well before they expire — you never need to do anything manually. If renewal ever fails, our monitoring alerts the team and we fix it before expiry.

If you ever see a browser warning about your SSL being expired or invalid, WhatsApp us immediately. We will fix it within the hour.

4 Fix Mixed Content Warnings

If you see a broken padlock or "Not Fully Secure" in the browser after enabling SSL, your site has mixed content — some assets (images, scripts, stylesheets) are still loading over HTTP instead of HTTPS.

For WordPress: Install the plugin Better Search Replace. Do a database search for http://yourdomain.co.za and replace with https://yourdomain.co.za. This updates all hardcoded HTTP links in your database at once.

Alternatively, the Really Simple SSL plugin handles mixed content automatically.

Mixed content is common when migrating a site from HTTP to HTTPS. If you need help, WhatsApp us your domain — we usually fix it in under 10 minutes.

SSL not working? We will fix it.

WhatsApp us your domain name and we will sort the SSL and HTTPS setup for you at no charge.