# Can I get a certificate if only have a public IP address? **URL:** \ **Category:** Help\ **Created:** [November 21, 2022, 12:19am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196 "2022-11-21T00:19:45Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 12:19am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/1 "2022-11-21T00:19:45Z")
I don't have a domain name.I just have a public IP address. Can I have a certificate? First time here, thanks! ---
**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\ **Post date:** [November 21, 2022, 12:40am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/2 "2022-11-21T00:40:38Z")
No. Let's Encrypt provides only Domain Validation certificates, which (as the name suggests) validate control of a public domain name. ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 12:49am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/3 "2022-11-21T00:49:05Z")
Thanks for response. Then how can I get my server accessed via HTTPS if it only has an IP address? ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [November 21, 2022, 12:52am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/4 "2022-11-21T00:52:08Z")
Unfortunately you might need to weigh the options: 1. Buy a cheap domain name 2. Buy an expensive certificate. 3. Use a self-signed certificate 😉 ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [November 21, 2022, 1:00am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/5 "2022-11-21T01:00:47Z")
OR Use a FREE DDNS name. [And use it to point to your IP address] ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [November 21, 2022, 1:06am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/6 "2022-11-21T01:06:08Z")
I like that approach the best. The certs I found in an extremely short time-span are incredibly expensive.. ---
**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\ **Post date:** [November 21, 2022, 1:38am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/7 "2022-11-21T01:38:40Z")
You can get a free 90 day certificate for a bare IP address from [https://zerossl.com/](https://zerossl.com/). You won't be able to make it automatically renewing without paying, though. ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 2:13am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/8 "2022-11-21T02:13:01Z")
> [@Rip](#): > > Use a self-signed certificate Is using a self-signed certificate essentially safe? Will this method be stolen or tampered with by an intermediary? ---
**Author:** ![orangepizza](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/orangepizza/32/19597_2.png) [@orangepizza](https://community.letsencrypt.org/u/orangepizza)\ **Post date:** [November 21, 2022, 2:24am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/9 "2022-11-21T02:24:16Z")
if you actually check the publickey, I'd say it's safer then 'trust by green padlock': think about SSH publickey auth. ---
**Author:** ![Rip](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rip/32/70863_2.png) [@Rip](https://community.letsencrypt.org/u/Rip)\ **Post date:** [November 21, 2022, 2:57am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/10 "2022-11-21T02:57:01Z")
> [@WuSiren](#): > > Will this method be stolen or tampered with by an intermediary? **This community is here to support Let's Encrypt issued certificates by LE supported ACME Clients.** That said, a properly generated self-signed certificate is as "safe" as any other cert issued by a commercial entity. They are useful in many ways...Here's the catch.... **Self-Signed Certificates ARE NOT "TRUSTED" by any major browser** at all. Which means every time someone visits the site they will have to "accept the risks" associated with a cert of this type. YOU must do the research before deciding to use a self signed cert. Example, Google Chrome: > This is probably not the site you are looking for! > The site's security certificate is not trusted! I recommend using another approach. > [@rg305](#): > > Use a FREE DDNS name. > [And use it to point to your IP address] OR: > [@\_az](#): > > You can get a free 90 day certificate for a bare IP address from [https://zerossl.com/](https://zerossl.com/). You won't be able to make it automatically renewing without paying, though. If you are the only one to use the ip/site... OK, but don't expect anyone else to appreciate the _perceived hazards_ when they attempt to use the site and wade through warnings and exceptions that will most likely result in a serious lack of users confidence. IMHO -- Get a domain name (as @rg305 mentions above). Use [certbot](https://certbot.eff.org/) and get a real FREE certificate from LE. You will be happier for it. (And we are here to help). My 2 cents 🪙 🪙 ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 3:06am UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/11 "2022-11-21T03:06:42Z")
Oh I see! It's very kind of you all! Thank you very much!🤝 ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 2:20pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/12 "2022-11-21T14:20:25Z")
Hello, Rip. I'm very sorry to bother you again. I am asking for a free 90 day certificate for a bare IP address from [https://zerossl.com/](https://zerossl.com/). It says that I need to verify ownership of my domain before installing the certificate. I have to choose the second Verification Method (HTTP File Upload) because I don't have a domain name. The steps are as follows: > To verify your domain using HTTP File Upload, please follow the steps below: > > 1. Download your Auth File using the following link: Download Auth File > 2. Upload the Auth File to your HTTP server under: /.well-known/pki-validation/ > 3. Make sure your file is available under the following link: http://[My IP Adress]/.well-known/pki-validation/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.txt > 4. Click "Next Step" to continue. Do you have any suggestions for the third step above? I tried to use `nginx` to implement it, but unfortunately, the default port 80 port of the web server does not seem to work. I have tried my best, and at present I can only access the auth file through the following link ([My IP Adress]:[Other Port Number]): http://[My IP Adress]:xxxx/.well-known/pki-validation/xxxxxxxxxxxxxxxxxxxxxxxxxxxx.txt. Can you give me some advice on this? Thank you very much! ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [November 21, 2022, 2:58pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/13 "2022-11-21T14:58:58Z")
> [@WuSiren](#): > > the default port 80 port of the web server does not seem to work Does your ISP block port 80? ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [November 21, 2022, 3:07pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/14 "2022-11-21T15:07:34Z")
If port 80 isn't availabe/possible, I don't see another way how ZeroSSL can validate the IP address. The site also gives a CNAME-option, but I'm pretty sure it's not possible to resolve `_randomvalue.1.2.3.4`.. ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 3:10pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/15 "2022-11-21T15:10:32Z")
I guess the problem should be here. 🤔 ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 3:14pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/16 "2022-11-21T15:14:19Z")
😭So do I have to get a domain name before I can use it? Or can't even if there is a domain name? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [November 21, 2022, 3:18pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/17 "2022-11-21T15:18:38Z")
If port 80 is being blocked (or being used by some other device), then `HTTP-01` validation is not an option for you. That leaves `DNS-01` validation. But that requires making required changes to a real (Internet accessible) DNS zone. [There is also `TLS-ALPN-01` authentication - but most ACME clients don't support it ☹] ---
**Author:** ![WuSiren](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/wusiren/32/65783_2.png) [@WuSiren](https://community.letsencrypt.org/u/WuSiren)\ **Post date:** [November 21, 2022, 3:27pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/18 "2022-11-21T15:27:13Z")
Thank you! Unfortunately, that's beyond my current ability, and I may need some more time to learn... Maybe I'd better get a free domain name first. Do you have any recommended way to get it? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [November 21, 2022, 3:33pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/19 "2022-11-21T15:33:25Z")
Do a web search. Look for one that allows for DNS TXT records. ---
**Author:** ![orangepizza](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/orangepizza/32/19597_2.png) [@orangepizza](https://community.letsencrypt.org/u/orangepizza)\ **Post date:** [November 21, 2022, 11:50pm UTC](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196/20 "2022-11-21T23:50:29Z")
if they have broken enough UI to add cname of ip address you may able to use email challenge to admin@[IP] it's valid email address, while it would be mississuance from them. [Next page](https://community.letsencrypt.org/t/can-i-get-a-certificate-if-only-have-a-public-ip-address/188196.md?page=2)