As I recall, the basic certificate itself from Let's Encrypt is free. Others with more sophisticated security have a cost. Nevertheless, the hosting server has to be configured to allow the security certificate for it to work. I'm not sure about Xara's domain service.