WWW → Domains → select domain → Security → Let's Encrypt → Get. ✅ Certificate issuance takes 30–60 seconds. Enable auto-renewal right away.