# Working with Let's Encrypt certificates

Let’s Encrypt is a global Certificate Authority (CA). This organization is a non-profit and does not charge fees for their certificates. Each certificate is valid for 90 days. RAS Console allows you to issue, automatically renew and revoke Let's Encrypt certificates.

## **Issuing a Let's Encrypt certificate**

To issue a new Let’s Encrypt certificate:

1. Navigate to **Infrastructure > Certificates**.
2. Click the ellipsis menu ( the **\[...]** icon) and choose **Let's Encrypt Settings**.
3. Select the **I have read and accept Let's Encrypt EULA** option.
4. In the **Expiration emails** field list specify the email addresses that will receive notifications from Let’s Encrypt.
5. Optionally, change the time when certificates are renewed automatically in the **Automatically renew certificates before expiration** field.
6. Navigate back to **Infrastructure > Certificates**.
7. Choose **Add > Issue Let's Encrypt** certificate from the **\[...]** menu and specify the following options:
   * **Name:** Name of the certificate.
   * **Description:** Description of the certificate.
   * **Usage:** HALB and/or Secure Gateway.
   * **Key size:** Key size.
   * **Country code:** Code of your country.
   * **Full state or province:** Name of your state or province.
   * **City:** Your city.
   * **Organization:** Name of your organization.
   * **Organization unit:** Name of your organization unit.
   * **E-mail**: Email address of your organization.
   * **Common name:** Valid domain name of a HALB or Secure Gateway.
   * **Alternative names:** Valid domain names of HALBs or Secure Gateways.
8. Click **Issue certificate**.

## **Renewing a Let’s Encrypt certificate manually**

To manually renew a Let’s Encrypt certificate:

1. Navigate to **Infrastructure > Certificates**.
2. Select the certificate that you want to renew.
3. Select **Control > Renew** from the **\[...]** menu.

## **Revoking a Let’s Encrypt certificate**

To revoke a Let’s Encrypt certificate:

1. Navigate to **Infrastructure > Certificates**.
2. Select the certificate that you want to renew.
3. Select **Control > Revoke** from the **\[...]** menu.