To start, you'll need a ZeroSSL account which you can create here (ZeroSSL is completely free, you are not required to take a subscription). Then in the "developers" tab, grab your API key:

Then, make sure your website is working with your server. Point the A records to your server for your domain, after that, you can go to your website in Ploi and select "SSL" on the left-hand side.

Now in the dropdown, select "ZeroSSL" and fill in the next fields.

If this process fails, we will detect this and send you an e-mail about it containing the error. 95% of the cases that a certificate is failed to be requested is due to the fact that the DNS record is not been set up correctly on your server.

Ploi also sets up your server for automatic renewals, you will find this specific cronjob in the /etc/crontab file.

Cloudflare users: You are not able to request an SSL certificate if you have the proxy on (orange cloud should be gray). You can disable this and then wait 15 minutes, after that request a new SSL certificate. Once that completes you can re-enable the proxy. After that, you can always leave the proxy on, even for renewals this is no problem.

Please note: If you have IPv6 set up for your domain, you will not be able to request a certificate. Please remove any AAAA records before you request a new certificate.