Hosting
SSL certificates
HTTPS on website plans, hosting and a VPS you manage yourself.
Website subscriptions and hosting
An SSL certificate is included on website plans and on hosting products that list it. Once the domain points at the site, HTTPS should work without you pasting a CSR. If the browser still warns, the hostname is usually still pointing at an old IP or the www / apex pair is incomplete.
On a VPS
You issue the certificate on the machine (Let’s Encrypt via certbot or Caddy is typical) after A/AAAA already point at the server. The website-plan certificate is not copied onto your VPS automatically.
Renewal is yours on self-service: a cron or the web server’s built-in renew. On managed VPS, TLS is in the scope we agreed — ask if it is not written down.
CAA
A CAA record limits which certificate authorities may issue for the domain. If Let’s Encrypt fails with a CAA error, check DNS for a CAA that does not list that CA.