Every hosting plan at SilkHost.pk arrives with an SSL certificate already paid for. It is issued the moment your domain points at our servers, installed without you touching a configuration file, and reissued automatically for as long as the account stays open. Your visitors get the padlock, your forms get encrypted, and your invoice never mentions it.
This is a domain validated certificate, the same type that secures the large majority of websites on the internet. The encryption it provides is identical to a certificate costing thousands of rupees a year. What you are not paying for is the manual vetting of your company name, which most websites simply do not need.
Get Free SSL Included with SilkHost.pk hosting plans from Rs 5,399 per year. No setup fee.
Pick any plan below and the certificate comes with it. There is no cheaper tier that leaves security out, and no upgrade required to switch your site to HTTPS.
Rs 5,399/yr
Rs 6,699/yr
Rs 8,999/yr
Rs 11,699/yr
Need more room? The unlimited tiers carry the same certificate, and so do WordPress, business and reseller accounts.
Please note: the free certificate is available only on SilkHost.pk hosting plans. Issuing and installing it requires control of the server your site runs on, so it cannot be supplied for a website hosted elsewhere, even when the domain is registered with us.
Without a certificate, everything travelling between your visitor and your server moves as readable text. Anyone sharing the network, a public hotspot or an internet provider along the route can read it and, in the worst case, alter it before it arrives. Six practical consequences follow from that.
Passwords, contact forms, addresses and order details are scrambled before they leave the browser. An attacker positioned between your visitor and your server captures noise rather than readable data.
Chrome, Safari, Edge and Firefox mark plain HTTP pages as not secure in the address bar. Most people abandon a page carrying that label before reading a word of it, whatever the site actually does.
Google has treated HTTPS as a ranking signal for years. The direct weight is modest, but the warning label on an insecure page pushes visitors away, and that damages the engagement signals which count for much more.
Every payment gateway operating in Pakistan requires HTTPS before it will process a transaction. No certificate means no checkout, whether you sell through a gateway, a wallet integration or a hosted payment page.
Encryption protects integrity as well as secrecy. On an unprotected connection, an intermediary can inject advertising or malicious scripts into your pages. With a certificate in place, altered content simply fails to load.
HTTP/2, service workers, geolocation, camera access and push notifications are all restricted to secure connections. An unencrypted site is locked out of most of what a browser can do today.
Free certificates are not a cut down product, but they are not the answer to every requirement either. Here is the real division of labour between the two.
| Aspect | Free certificate included | Paid certificate |
|---|---|---|
| Yearly cost | Rs 0, bundled with hosting | From $3.99 per year |
| Encryption strength | Identical | Identical |
| Padlock in the browser | Shown | Shown |
| What gets verified | Control of the domain | The domain, and optionally the legal entity |
| Company name in the certificate | Not included | With organisation or extended validation |
| Unlimited subdomains | Each one listed individually | With a wildcard certificate |
| Financial warranty | None | Included, amount varies by product |
| Time to issue | Minutes, automatically | Minutes to several days, depending on vetting |
| Renewal | Automatic, nothing to remember | Manual, every year |
| Best suited to | Business sites, blogs, portfolios, most small shops | Banks, large retailers, regulated firms, wildcard needs |
If your situation falls in the right hand column, our paid SSL range covers RapidSSL, Thawte and wildcard options. For everything else, what comes with your hosting is genuinely enough.
Either you register the domain with us, or you update the name servers on one you already own. Validation cannot begin until the domain resolves to your hosting account.
The server answers an automated challenge from the certificate authority, demonstrating that whoever requested the certificate genuinely controls the domain. No paperwork, no phone call.
Issuance and installation happen inside cPanel without intervention. Your domain, the www version and existing subdomains are all covered in the same request.
Well before expiry a fresh certificate is requested and swapped in. Short certificate lifetimes are a deliberate security measure, and the automation is what makes them painless.
One step is still yours. Once the certificate is live, send visitors to the secure version by redirecting HTTP to HTTPS and correcting any internal links that still begin with http. Our support team will do this for you if you ask.
It stays free for as long as the hosting account is active. This is not an introductory offer that converts to a paid item at renewal. The certificate is bundled into every SilkHost.pk hosting plan, it reissues itself automatically before each expiry, and no separate line ever appears on your invoice for it.
The encryption is identical. Both use the same TLS protocols, the same cipher suites and the same key strengths, and a visitor sees the same padlock. The difference is not the encryption but the vetting behind it. A free certificate proves only that you control the domain, while an organisation validated or extended validation certificate involves checks on the legal entity behind the site.
Issuance normally completes within minutes of the domain pointing at our servers. The one dependency is DNS. The certificate authority must be able to verify that the domain resolves to your hosting account, so if you have just changed name servers the certificate is issued once that change propagates, usually within a few hours.
Yes. Both the bare domain and the www version are covered, and subdomains created inside your hosting account are picked up automatically on the next issuance cycle. What a free certificate does not cover is a wildcard entry matching every possible subdomain at once, which is where a paid wildcard certificate earns its price.
No. Free certificates carry short lifetimes by design, and the renewal is automated on the server. A fresh certificate is requested and installed well before the current one expires, with no action from you and no downtime. The short lifetime is a security feature, because a compromised certificate stops being useful quickly.
Four situations justify paying. You want the registered company name vetted and displayed in the certificate. You need one certificate covering unlimited subdomains. You need a financial warranty attached to the certificate. Or a client, bank or compliance auditor specifically requires a validated certificate. For an ordinary business site, a blog or a small shop, the free certificate is sufficient. Compare the options on our SSL certificate page.
HTTPS has been a confirmed, if lightweight, ranking signal for years, so the direct effect is positive but modest. The larger gain is indirect. Browsers label plain HTTP pages as not secure, and that warning drives visitors away before they read anything, which harms the engagement signals that matter far more than the certificate itself.
That is mixed content. The page itself loads over HTTPS while an image, script or stylesheet inside it is still requested over plain HTTP, so the browser withholds the padlock. The fix is to update those internal links to HTTPS or to protocol relative paths. On WordPress a search and replace across the database usually clears every instance at once.
Yes. Certificate authorities validate control of a domain, not the country it belongs to, so .pk, com.pk, edu.pk and org.pk names are all covered exactly like a .com. The only requirement is that the domain resolves to your SilkHost.pk hosting account when validation runs.
No. The free certificate is a feature of the hosting service, because issuing and installing it requires control of the server the site runs on. A domain registration on its own does not include it. If you host elsewhere, buy a certificate separately or use whatever your current provider offers.
Choose a plan, point your domain, and the certificate takes care of itself from there.
All Hosting Plans • Paid SSL Certificates • WordPress Hosting • Business Hosting • Domain Registration • Contact Us