# Do I need a paid SSL

> Canonical: https://jethost.com/kb/do-i-need-a-paid-ssl/ · Last modified: 2026-09-08T11:03:07+00:00

Every JetHost plan includes a free Let's Encrypt certificate, and for most websites that is all you need. Sometimes, though, a **paid SSL certificate** is the better choice. This guide explains when a paid certificate makes sense, the types we offer, and how the issuing process works.

## Free vs. paid SSL

A free [Let's Encrypt certificate](https://jethost.com/kb/lets-encrypt-ssl/) encrypts your traffic and shows the padlock exactly like a paid one. The difference is not the encryption – it is the level of **identity validation** behind the certificate, plus extras like a warranty and support. For a blog or small site, free is perfect. For a business handling payments or sensitive data, a paid certificate can be worth it.

The free Let's Encrypt SSL is **included on our shared hosting** and issued automatically through AutoSSL. On other services, such as a VPS or a self-managed server, installing and renewing SSL is your responsibility – though our team can still guide you.

## When a paid certificate makes sense

- You run an online store or handle payments and want the extra trust and warranty.
- You need your **verified company name** shown in the certificate details.
- A partner, bank, or compliance rule specifically requires an OV or EV certificate.
- You want a single certificate with a warranty covering many subdomains or sites.

## Types of paid SSL we offer

We can provide the main validation levels:

- **Domain Validation (DV)** – confirms you control the domain. Issued quickly, similar trust level to Let's Encrypt but with a warranty.
- **Organization Validation (OV)** – verifies your business identity, which appears in the certificate. Takes a few days.
- **Extended Validation (EV)** – the most rigorous vetting, for maximum trust on high-profile or financial sites.

## How the issuing process works

1. **Choose and order the certificate.** Decide which type you need – DV, OV, or EV – and let our team know.
2. **Generate a CSR.** A Certificate Signing Request is created in cPanel under **SSL/TLS → Generate a CSR**. This also creates a matching private key that stays on your server. Fill in your domain and, for OV/EV, your real company details.
3. **Submit the CSR to the certificate authority.** The CSR is sent to the issuing authority to request the certificate.
4. **Complete validation.** For **DV**, you prove domain control by email, a DNS record, or a file upload. For **OV** and **EV**, the authority also verifies your organization using business documents, so these take a few days.
5. **Receive and install the certificate.** Once issued, you get the certificate and its CA (intermediate) bundle. These go into cPanel under **SSL/TLS → Install and Manage SSL**. On shared hosting our team can install it for you; on a VPS or self-managed server you install it yourself.

Unlike Let's Encrypt, a paid certificate does not renew itself. Before it expires each term, you renew it, repeat the validation, and reinstall the new certificate.

## JetHost Experts Tip

Not sure whether you need a paid certificate? For most sites, the free Let’s Encrypt SSL is genuinely enough. Choose paid mainly when you need verified company identity or a warranty – our team can advise on your specific case before you spend anything.

## Need more help?

Thinking about a paid SSL certificate? Open a ticket through **Client Area → Support Tickets** and our team will recommend the right option and handle the whole issuing process for you.