How managed SSL works
We issue and renew Let's Encrypt certificates for every site automatically — here's the lifecycle.
Last updated: 2026-08-114 min read
Every site we host is served over HTTPS using a free Let's Encrypt certificate. Certificates are issued and renewed by the Mahsumaah team using certbot — you never handle certificate files, private keys, or renewal dates yourself.
The certificate lifecycle
- When your domain resolves to our server, certbot requests a certificate from Let's Encrypt.
- The certificate covers both your root domain and the www host.
- Nginx is configured to serve your site over HTTPS and redirect HTTP to HTTPS.
- Certbot renews the certificate automatically well before its expiry, with no downtime.
Note
Because renewal is automatic, there's nothing to buy or install. If you ever see a certificate warning, it usually points to a DNS issue rather than a certificate problem — see SSL troubleshooting.
Need more help?