Let's Encrypt Certificates

Issue a Let's Encrypt certificate (including wildcard) using the DNS-01 method — no server access required, just your DNS provider's control panel.

Unlike the other tools on this site, this tool does NOT run solely in your browser — it communicates with the Let's Encrypt server on your behalf to verify control of the domain and issue the certificate. The certificate's private key is generated fresh for this one request and shown exactly once — it is never stored anywhere permanently.

Let's Encrypt limits the number of certificates issued per domain per week. Leave staging mode enabled for your first attempts so you don't hit that limit — a staging certificate isn't trusted by browsers, but lets you verify the whole process works correctly.