diff --git a/howto/use.a.bought.ssl.certificate.md b/howto/use.a.bought.ssl.certificate.md
index a61fe2d9..6aeebc47 100644
--- a/howto/use.a.bought.ssl.certificate.md
+++ b/howto/use.a.bought.ssl.certificate.md
@@ -10,6 +10,8 @@ annoying message, you have to buy a SSL certificate from SSL certificate
provider. Search `buy ssl certificate` in Google will give you many SSL
providers, choose the one you prefer.
+> [StartSSL.com offers free one-year certificate](http://www.startssl.com/?app=1).
+
## Generate SSL private key and buy one SSL certificate
First of all, you need to generate a new SSL certificate on your server
diff --git a/html/use.a.bought.ssl.certificate.html b/html/use.a.bought.ssl.certificate.html
index d16b51cf..19fd7d77 100644
--- a/html/use.a.bought.ssl.certificate.html
+++ b/html/use.a.bought.ssl.certificate.html
@@ -33,6 +33,9 @@ to warn you this self-signed certificate is not trusted. To avoid this
annoying message, you have to buy a SSL certificate from SSL certificate
provider. Search buy ssl certificate
in Google will give you many SSL
providers, choose the one you prefer.
+ +
First of all, you need to generate a new SSL certificate on your server
with openssl
command. WARNING: do NOT use key length smaller than 2048
bit,