Host TonicPremium Cloud Infrastructure
Free DV SSL on every plan

Every visitordeserves a padlock.

Free auto-renewing DV SSL on every hosting plan. Upgrade to Wildcard, OV or EV certificates when you need enterprise-grade trust, warranty and compliance.

TLS 1.3 · HTTP/3 Auto-renewal 250+ browsers trusted
Connection secure · TLS 1.3
Valid ✓
  • Subject: CN=yourdomain.com
  • Issuer: Host Tonic Issuing CA · R3
  • Signature: ECDSA P-256 · SHA-384
  • Cipher: TLS_AES_256_GCM_SHA384
  • Valid from: 2026-01-01
  • Valid to: 2026-04-01 (auto-renews)
  • HSTS: max-age=63072000 · preloaded
Choose your certificate

Three tiers. One padlock everyone trusts.

Free · Auto-installed

DV — Domain Validated

Free

on every web hosting plan — Free Let's Encrypt SSL licence provided

  • TLS 1.3 · 256-bit encryption
  • Auto issuance & auto-renewal
  • HTTPS padlock + HTTP/3 ready
  • Trusted by every major browser
  • Unlimited reissues
Get free SSL
Most popular
Best for subdomains

Wildcard SSL

$59

/year — unlimited subdomains

  • Secures *.yourdomain.com
  • One cert, every subdomain
  • TLS 1.3 · 256-bit encryption
  • $10,000 warranty
  • Priority reissue support
Buy Wildcard
For regulated & enterprise

OV / EV Business

$149

/year — verified organisation

  • Company name in cert details
  • Extended Validation available
  • $1.75M relying-party warranty
  • Sectigo / DigiCert issuance
  • Compliance-ready (PCI, HIPAA)
Talk to sales
What's inside

Modern encryption, zero-touch operations.

One-click activation

New sites get HTTPS the moment DNS resolves — no CSR uploads, no manual installs.

Auto-renewal

Certificates renew automatically every 90 days. You'll never wake up to an expired padlock.

HTTP/3 + TLS 1.3

Modern encryption over the fastest transport — faster handshakes, better privacy.

Browser-trusted

Trusted by Chrome, Safari, Firefox, Edge and 250+ other clients out of the box.

HSTS + OCSP stapling

Hardened by default with HSTS preload eligibility and OCSP stapling.

Free forever

DV SSL is included on every shared, WordPress, eCommerce, VPS and cloud plan — no upsell.

FAQ

SSL questions, plain answers.

Do I have to install anything?+

No. On every Host Tonic hosting plan, SSL is provisioned automatically as soon as your domain points to us. Renewal is automatic too — you never need to touch it.

What's the difference between DV, OV and EV?+

DV (Domain Validation) proves you control the domain — perfect for blogs, apps and most business sites. OV (Organisation Validation) verifies your legal entity. EV (Extended Validation) is the strictest, ideal for banks, healthcare and regulated industries.

Can I use my own certificate?+

Yes. VPS and Cloud plans support any third-party cert (Sectigo, DigiCert, GlobalSign, Let's Encrypt, etc.). You can upload custom certs from the control panel or via API.

What is a Wildcard SSL?+

One certificate that secures every subdomain of a single domain — like www, shop, api, blog. Ideal for SaaS products and multi-tenant apps.

Are these certificates browser-trusted?+

Yes. Every certificate we issue chains to a root trusted by all major browsers, mobile devices, email clients and libraries. No visitor sees warnings.

Launch encrypted from day one.

Every Host Tonic hosting plan ships with free auto-renewing SSL — no setup, no upsell, no expiring padlocks.