Every MdmHost hosting account includes free SSL certificates through AutoSSL. Customers often ask whether they should buy a certificate anyway. For most sites the answer is no, but there are specific situations where a paid certificate makes sense.
Before you start
- Check what you have now: cPanel → Security → SSL/TLS Status lists each domain and whether it has a valid certificate.
- Know whether anyone (a bank, payment provider, enterprise customer or auditor) requires a particular certificate type.
Side-by-side comparison
| Aspect | Free AutoSSL | Paid certificate |
|---|---|---|
| Encryption strength | Same | Same |
| Browser padlock | Yes | Yes |
| Validation | Domain (DV) | DV, OV or EV |
| Organisation name in certificate | No | Yes with OV/EV |
| Renewal | Automatic | Manual reissue and install |
| Wildcard | Depends on DNS setup | Available |
| Warranty | No | Usually included |
| Cost | Included | Yearly fee |
When free AutoSSL is the right choice
- Business websites, blogs, portfolios and online shops.
- WordPress, SitePad and Sitejet sites.
- Webmail, cPanel and mail server access for your domain.
- Any site where you want zero maintenance: AutoSSL renews before expiry without you doing anything.
When a paid certificate is worth it
- OV or EV required: some enterprise customers, government tenders or financial partners require a verified organisation in the certificate.
- Wildcard needed for many subdomains and AutoSSL cannot cover them with your DNS setup.
- Certificate used outside the hosting, for example on a device, load balancer or application that cannot renew automatically.
- Warranty or a specific CA is required by contract.
Trust seals and conversions
Paid certificates often include a "site seal" image. Studies on whether seals increase sales are mixed, and today's shoppers mostly look for the padlock and a well-designed, trustworthy site. Do not buy a certificate only for the seal.
If you buy one
- Generate a private key and CSR in cPanel → Security → SSL/TLS.
- Submit the CSR to the certificate authority and complete validation.
- Install the issued certificate and CA bundle in cPanel → Security → SSL/TLS → Manage SSL sites.
- Set a reminder well before expiry to renew and reinstall.
Once a valid paid certificate is installed, AutoSSL does not replace it. If the paid certificate expires, AutoSSL can step in again, provided the domain is not excluded.
Common misconceptions
- "Free certificates are less secure." False: the encryption is identical.
- "Google ranks paid SSL higher." False: HTTPS counts, the certificate type does not.
- "Free certificates expire and break my site." AutoSSL renews them automatically. Problems only occur if DNS stops pointing to the server.
Frequently asked questions
Can MdmHost install a paid certificate for me?
Yes. If you have the certificate files, open a ticket at Support → New ticket and our team can help, or follow the installation guide yourself.
What about email clients?
Use the server hostname or the mail. name covered by AutoSSL for IMAP and SMTP to avoid certificate warnings.
My AutoSSL certificate is missing. Do I need to buy one?
Usually not. AutoSSL fails when the domain does not point to the server, when a CAA DNS record blocks the provider, or when the domain was excluded. Fix the cause and run AutoSSL again from cPanel → Security → SSL/TLS Status; buying a certificate would not fix a DNS problem anyway.