SSL Options in Plesk for Windows
Plesk for Windows gives you three different ways to secure your domain with an SSL certificate. Choosing the right option depends on your needs for cost, convenience, and certificate type.
Option 1: Free SSL with Let’s Encrypt
The easiest and most popular option is to install a free SSL certificate from Let’s Encrypt. Certificates are valid for 90 days but Plesk automatically renews them, so your site stays secure without manual effort.
- Free of charge
- Trusted by all major browsers
- Auto-renewal handled by Plesk
- Recommended for most websites
Option 2: Purchase SSL via Plesk Marketplace
Plesk integrates with SSL resellers, allowing you to purchase premium certificates directly from the control panel. This option is convenient because Plesk automates CSR generation, validation, installation, and renewal.
- One-click purchase and installation
- Includes premium options (Wildcard, EV, OV)
- Higher warranty and validation levels
- Costs more than Let’s Encrypt or buying directly from a CA
Note: When you purchase SSL inside Plesk, you are buying from Plesk’s reseller marketplace, not directly from Fast2Host. For cheaper SSL certificates, you can buy directly from Fast2Host at https://www.fast2host.com/services/ssl-certificates/.
Option 3: Upload SSL from an External Certificate Authority
If you prefer, you can generate a CSR in Plesk, purchase an SSL certificate from any trusted Certificate Authority (CA), and then upload the certificate files into Plesk.
- Flexibility to choose your preferred CA (e.g., DigiCert, Sectigo, GlobalSign)
- May be cheaper than Plesk’s marketplace
- Requires manual upload of certificate and CA bundle
- Renewals must be managed manually
Best Practices
- Use Let’s Encrypt for most sites — it’s free, fast, and auto-renewing.
- Choose Plesk Marketplace SSL if you need premium validation (EV/OV) or Wildcard coverage.
- Buy SSL certificates cheaper directly from Fast2Host if you want premium SSL at lower cost.
- Always confirm your domain resolves to the server’s public IP before issuing SSL.