Most of the big hosts have exclusive agreements with certain CAs that prevent them from offering free SSLs through Letsencrypt. They will usually install a cert

Most of the big hosts have exclusive agreements with certain CAs that prevent them from offering free SSLs through Letsencrypt. They will usually install a cert for you, sometimes for a fee, but never in an automated way, so even if you are using Letsencrypt, you'll need to open a ticket / pick up a phone every 90 days. You can't just write a cron and quit worrying about it, which is the central value proposition for LetsEncrypt/ACME as far as I'm concerned.