Skip to main content
Certificate issuance

Requesting Free Certificates with FreeSSL.cn

Request single-domain, multi-domain, and wildcard certificates with FreeSSL.cn and configure their deployment.

CertOne3 min read

FreeSSL.cn provides certificate application workflows for single-domain, multi-domain, and wildcard certificates, including ACME-based offerings from CAs such as Let's Encrypt and ZeroSSL. This guide covers registration, validation, download, and installation.

1. FreeSSL.cn overview​

1. Platform features​

Free certificate issuance:

  • Free DV issuance options
  • Let's Encrypt and ZeroSSL options
  • The original guide describes one-year single-domain certificates; verify current validity
  • The original guide describes 90-day multi-domain and wildcard certificates

Domain coverage:

  • Single-domain certificates
  • Multi-domain (SAN) certificates
  • Wildcard certificates

Validation:

  • DNS validation
  • HTTP validation
  • File validation

2. Use cases​

  • Personal websites and blogs
  • Small business websites
  • Projects needing free certificates
  • Users familiar with ACME

2. Register and sign in​

1. Create an account​

Visit FreeSSL.cn and click Sign up:

  • Enter your email address
  • Set a password
  • Complete email verification

2. Sign in​

Sign in with your registered email address and password.

3. Single-domain issuance​

1. Create a request​

  1. Open the certificate application page
  2. Click Create new certificate
  3. Select Single-domain certificate

2. Enter domain details​

3. Select a validation method​

DNS validation:

  • Add a TXT record through your DNS provider
  • Suitable when you cannot create files on the server

HTTP validation:

  • Create a validation file on the web server
  • Suitable when you can configure the web server

4. Complete validation​

DNS validation:

  1. View the required TXT record
  2. Add it with your DNS provider
  3. Wait for propagation, usually a few minutes
  4. Click Verify

HTTP validation:

  1. View the required file path and contents
  2. Create the challenge file on the server
  3. Ensure public HTTP access to the file
  4. Click Verify

5. Download the certificate​

After validation and issuance, download:

  • Certificate file (.crt)
  • A private key file (.key)
  • Chain file (.chain.crt)

4. Multi-domain issuance​

1. Create a multi-domain request​

  1. Select Multi-domain certificate
  2. Enter the primary domain
  3. Add the remaining names as SANs

2. Domain requirements​

  • Multiple names can be included, subject to provider limits
  • Every name must be validated
  • Validation methods may differ between names

3. Validate every domain​

Complete validation for each name:

  • Use supported DNS or HTTP validation
  • All names must pass before issuance

4. Download​

Download the certificate containing all validated names.

5. Wildcard issuance​

1. Create a wildcard request​

  1. Select Wildcard certificate
  2. Enter a name such as *.example.com
  3. A wildcard covers one subdomain level only

2. Validation method​

ACME wildcard certificates require DNS validation:

  • Add a TXT record through your DNS provider
  • Prove control of the parent domain's DNS

3. Validate every domain​

  1. Add the required TXT record
  2. Wait for propagation
  3. Complete validation

4. Download​

Download the wildcard certificate after issuance.

Certificate configuration​

1. NGINX configuration​

server {
    listen 443 ssl;
    server_name example.com;
    
    ssl_certificate /path/to/cert.crt;
    ssl_certificate_key /path/to/private.key;
    ssl_trusted_certificate /path/to/chain.crt;
    
    # Add the remaining site configuration here.
}

2. Apache configuration​

<VirtualHost *:443>
    ServerName example.com
    SSLEngine on
    
    SSLCertificateFile /path/to/cert.crt
    SSLCertificateKeyFile /path/to/private.key
    SSLCertificateChainFile /path/to/chain.crt
</VirtualHost>

7. Renewal​

1. Manual renewal​

Before expiration:

  1. Sign in to FreeSSL.cn
  2. Locate the certificate
  3. Click Renew
  4. Complete validation again
  5. Download and deploy the replacement

2. ACME renewal​

Use an ACME client for supported certificate workflows:

  • acme.sh
  • Certbot
  • Other compatible ACME clients

Configure the endpoint and account credentials supplied for the selected ACME offering to automate renewal.

8. Common issues​

1. Validation fails​

Possible causes:

  • DNS changes have not propagated
  • Inaccessible HTTP challenge file
  • Validation timed out

Resolution:

  • Check DNS resolution
  • Check the HTTP challenge path
  • Wait for DNS propagation, then retry

2. Download fails​

Possible causes:

  • Issuance has not completed successfully
  • Network problems

Resolution:

  • Inspect the certificate
  • Retry the download
  • Check network connectivity

3. Browser warnings after installation​

Possible causes:

  • Incomplete certificate chain
  • Incorrect certificate configuration

Resolution:

  • Use the full-chain file
  • Check server settings
  • Run a TLS configuration test

9. Comparison with CertOne​

1. Feature comparison​

FeatureFreeSSL.cn workflow described hereCertOne
Free issuance✅✅
Automatic renewal⚠️ ACME client setup✅ Platform automation
Automatic deployment❌✅
Certificate monitoring❌✅
Management interface✅✅
Multi-domain certificates✅✅
Wildcard certificates✅✅

2. Use cases​

FreeSSL.cn suits:

  • Users familiar with ACME
  • Manual certificate workflows
  • One-off certificate requests

CertOne suits users who:

  • Automated certificate management
  • Automatic deployment
  • Certificate monitoring

Conclusion​

FreeSSL.cn supports free single-domain, multi-domain, and wildcard certificate requests. The manual workflow requires you to manage renewal and deployment, or configure ACME automation separately.

CertOne integrates renewal, deployment, and monitoring when you need a centralized automated workflow.