The Certificate Line
SSL certificates: the line item you no longer bill for
Resellers used to make a tidy annual margin on certificates, and then automation made them free — so the question is what replaced that revenue.
Straight answer first
An SSL certificate is the credential that proves a server really controls the domain it is serving and switches on encrypted HTTPS — and commercially it is the line item automation took off your invoice, which is worth understanding before a client asks why their old host charged for it.
So the useful question is not how certificates work but what replaced the revenue. Free automated issuance covers the ordinary case on every account you create and reissues before expiry, which removes the invoice line and the most embarrassing ticket in hosting at the same time. What is left worth quoting is narrow: coverage a free certificate cannot give, and validation a free certificate cannot perform.
Written by the Hosting Seller staff · Checked 4 August 2026
100+
Line items, explained
2 min
About, per entry
Plain
Prices, not posturing
24/7
Cover when one lapses
Technically it is a TLS certificate, though the older name has stuck everywhere including on price lists. It binds a public key to a domain name and carries the signature of an authority that browsers already trust, which is what turns an encrypted connection into a trusted one.
Free automated certificates are issued and renewed by machine on every plan here, across every client account, with reissue happening before expiry. That is the baseline your packages are built on, and it is also why nobody can sell an ordinary certificate any more.
The revenue line automation removed
There was a period when a reseller could add a certificate to every client invoice and clear a decent annual margin for a few minutes of installation work. Automated issuance ended that, permanently, and any package still built on that assumption is quietly pricing a product nobody will buy.
The compensating move is not to find something else to bill for on the same line. It is to make free encryption part of what your packages promise, so a client comparing you with a host that still charges sees the difference on the quote rather than in the small print.
What a client actually notices
Not the certificate. They notice the padlock, they notice a browser warning, and they notice if a search result stops appearing. Nobody has ever thanked a reseller for a valid certificate and everybody remembers the morning their site said not secure.
That asymmetry is the whole management brief. There is no upside to be captured here, only a downside to be prevented, which makes automation and monitoring worth more than any amount of explanation.
Expiry, and why it is never a client's fault
A full-page browser warning is instant, total and public. It arrives with no gradual degradation, and the client's customers see it at the same moment the client does, which is why it generates a phone call rather than a ticket.
Automatic renewal is what prevents it, and across a client list it is the only approach that scales. Any certificate you installed by hand for a client needs a date in a calendar you actually look at, because it will not renew itself and nobody else is watching it.
What is still worth selling
Two things. A wildcard, when a client's application creates subdomains faster than anything can issue certificates for them individually. And an extended-validation certificate, when a client's procurement process or a payment page demands a checked company identity rather than merely a verified domain.
Both are genuine products with real reasons behind them, and both are sold by explaining the specific limitation of the free option rather than by implying that free encryption is weaker. HTTPS and Let's Encrypt are the entries that finish this picture.
A solved technical problem and an open commercial one
Certificates are a solved technical problem and an unsolved commercial one. These entries treat them as a line item, so you can explain the free option and sell the paid one without contradicting yourself.
Free SSL is fitted on every plan and reissued before it lapses, across every client account you create.
- Certificates treated as a line item rather than a lecture
- What renews itself and what needs a date in your own calendar
- The free option described honestly, so the paid one stays defensible
- Linked, so the two products still worth quoting sit together
Why Hosting Seller
On every plan, as standard
Read as a line item
What you can charge for and what you cannot, because the technology stopped being the interesting part some years ago.
The revenue that disappeared
What automation quietly removed from reseller invoices, and what that leaves you selling instead.
Expiry treated as yours
Why a lapsed certificate is never the client's fault, whatever the small print on your terms happens to say.
Free and paid, side by side
The free option described honestly, so recommending a paid certificate later does not contradict you.
Manual installs listed
Anything fitted by hand does not renew itself, and the entry says where that list should live.
Two cases still worth selling
The narrow situations where a paid certificate genuinely answers a question somebody asked.
First Steps
From choosing to live
- 1
Put free encryption on the quote
Do not bury it in a feature list. A client comparing you with a host that still bills annually for certificates should see the difference while they are deciding.
- 2
List anything you installed by hand
Automated certificates look after themselves. The manual ones are the entire risk, and they only exist in a calendar you remember to keep.
- 3
Learn the two real sales cases
Subdomains appearing faster than certificates can be issued, and a procurement process demanding a checked company name. Everything else is covered for free.
In the Box
Packed with every plan
- Free SSL on every client site, reissued before it lapses
- cPanel on every account — the panel a client's next developer already knows
- Client accounts moved in by our staff, at no charge
- WordPress Toolkit, with updates applied for you
- Staging copies so client changes get tested before they go live
- Daily backups on every plan, with restores you run yourself
- NVMe SSD under the whole platform, LiteSpeed cache in front
- Nothing charged at setup on any reseller tier
- The renewal price printed on the tag matches the order price
- Real people on the desk at any hour, for you and for your clients
Across the Counter
Things people ask us all the time
Can I still charge clients for SSL?
Not for ordinary encryption, and trying tends to cost you the account when the client finds out. What you can charge for is the two things free certificates genuinely cannot do: wildcard coverage for an application spawning subdomains, and a certificate carrying a checked company identity for a procurement or payment requirement.
A client asks why their previous host billed for this. What do I say?
That automated issuance changed the economics and some hosts have not updated their price lists. Keep it factual rather than triumphant — the client is asking whether they were overcharged, and a straight answer about how the market moved earns more trust than a dig at whoever they left.
What happens across my client list if a certificate is not renewed?
That client's visitors meet a full-page browser warning, immediately and totally, and you find out by telephone. Automated renewal is what prevents it, which is why anything you installed manually for a client is the only real risk on your list and needs a date you will actually see.
Do I need to install anything when a client adds a subdomain?
Normally no. Automated issuance covers new hostnames as they appear, so the ordinary case looks after itself. Where a client's application creates subdomains continuously or on demand, a wildcard certificate is the cleaner answer and is one of the few certificate products still worth quoting.
Read next
Agency Hosting
Agency hosting for client sites you manage rather than resell, with staging and care-plan plumbing.
Web Hosting
The shared plan behind most of your client sites, with cPanel, free SSL and a migration handled for you.
Moving your site to another host? Start with this checklist.
A step-by-step order of work for a move your visitors never spot: which files to copy first, how to carry email across without losing one message, the right moment to repoint DNS, and the two mistakes behind nearly every hour of downtime people ring us about.
Stop billing for certificates. Bill for the work.
Free SSL on every client site reissued before it lapses, WordPress Toolkit updates applied for you, and staging copies where the plan carries them.
See Agency Hosting plans