Does it matter share host or cloud host?

What? We can have free https now? Is it hard to setup?

Lets Encrypt https://letsencrypt.org - is so incredibly awesome! if your host already supports it - click a button and in a few seconds you have https. i did a lot of research on this and except for some edge edge cases, its completely supported. the thing to understand is they renew every 90 days so thats why if you are on shared or managed its easier if your hosting company supports them - then the renewal happens automatically and you never have to worry about it. updating every 90 days is also much better for security because the certificate is constantly being improved. otherwise if you are on your own VPS you can set it up to automatically renew with some cron job scripts -- google it and you will see some tutorials and code.

I will. Seems great news!

What? We can have free https now? Is it hard to setup?

Lets Encrypt https://letsencrypt.org - is so incredibly awesome! if your host already supports it - click a button and in a few seconds you have https. i did a lot of research on this and except for some edge edge cases, its completely supported. the thing to understand is they renew every 90 days so thats why if you are on shared or managed its easier if your hosting company supports them - then the renewal happens automatically and you never have to worry about it. updating every 90 days is also much better for security because the certificate is constantly being improved. otherwise if you are on your own VPS you can set it up to automatically renew with some cron job scripts -- google it and you will see some tutorials and code.

I will. Seems great news!

Install letsencrypt on CentOS 6.x

- Instsall repo iUS

rpm -Uih https://centos6.iuscommunity.org/ius-release.rpm
yum install python27 python27-devel python27-pip python27-setuptools python27-tools python27-virtualenv --enablerepo=ius
git clone https://github.com/letsencrypt/letsencrypt
**SEO SPAM REDACTED**
./letsencrypt-auto certonly --manual

nginx config

        ssl                  on;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

        ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;

        ssl_ciphers          ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW;
        ssl_prefer_server_ciphers   on;
        add_header Front-End-Https on;
        ssl_session_timeout  5m;

Here is my note