SSL certificate for a .al domain
The padlock in the address bar is not a luxury. Here is how to enable HTTPS for your .al site, often at no extra cost.
What SSL is and why it matters
SSL, or more precisely TLS in today's versions, is the technology that encrypts the connection between the visitor's browser and the website's server. When a site has a valid certificate, the address starts with https:// and the browser shows the secure connection symbol.
Without HTTPS, data typed into forms, such as passwords, names or phone numbers, travels in readable form for anyone sitting in between. Modern browsers mark sites without HTTPS as "not secure", which drives visitors away, especially for an online store. Search engines also treat HTTPS as a positive signal.
- Confidentiality — nobody on the network can read the traffic.
- Integrity — content cannot be altered on the way.
- Identity — the certificate proves the visitor reached the right domain.
Free certificates with AutoSSL on hosting
UpFlare hosting accounts use cPanel with AutoSSL. This tool automatically issues a free certificate for the domain and renews it before it expires, without any action from you.
There is one important condition: the domain must point to the server. The authority issuing the certificate checks that the domain really opens from that server. If the nameservers or the A record still point elsewhere, the check fails and the certificate is not issued.
- Point the domain to your hosting following the hosting guide.
- Wait for DNS propagation, usually a few hours, up to 24–48 hours.
- Check that
wwwalso points to the same server. - Wait for the next AutoSSL run or request it from cPanel, in the SSL/TLS Status section.
If you use a CAA record in your DNS zone, make sure it allows the authority used by AutoSSL, otherwise issuance is blocked.
When a paid certificate is worth it
For most sites, a free certificate gives the same level of encryption as a paid one. The difference lies in validation and the services that come with it. Free certificates only prove control over the domain, while some paid certificates also verify the organisation behind it.
| Type | What is verified | Best for |
|---|---|---|
| Free (AutoSSL) | Control over the domain | Business sites, blogs, portfolios |
| Paid, domain validation | Control over the domain | When you need support or specific terms |
| Paid, organisation validation | Domain and legal entity | Companies that want a verified identity |
A paid certificate is also the answer when the site is not on hosting with AutoSSL. You will find the available options under SSL certificates.
Always force HTTPS
Having a certificate is not enough if the site still opens over http://. Visitors who click old links or type the address without a protocol may end up on the insecure version.
In cPanel, enable the Force HTTPS Redirect option for the domain, which automatically redirects every HTTP request to HTTPS. Do this only once the certificate is active, otherwise visitors will see a security warning.
After the redirect, check two things:
- Mixed content — images, scripts or styles still loaded over
http://break the security symbol. Update the links on the site or in the platform settings. - Main address — in WordPress and similar platforms, set the site address with
https://.
The most common problems
- The certificate covers only one variant — e.g.
yourname.albut notwww.yourname.al, because www points elsewhere. - AutoSSL fails — the domain does not point to the server yet, or a CAA record blocks the authority.
- Expired certificate — usually happens when the domain has moved to another server and automatic renewal no longer passes.
- Expired domain — if the domain itself expires, the site stops, certificate or not. Renew it in time.
Frequently asked questions
Is the SSL certificate for my .al site free?
Why does AutoSSL not issue the certificate?
Does HTTPS slow down my site?
When should I enable the HTTPS redirect?
A secure site from day one
Register your .al domain, connect it to hosting and enable free HTTPS with AutoSSL.