StackPath offers a free custom SSL certificate to help protect your web traffic through your site's domain. This article will show you how to request and validate the Free StackPath SSL Certificate and delivery your content over HTTPS.
Before we get started, let's take a look at how SSL certificates are issued to make sure all of your sites are properly covered.
- If your StackPath CDN site is created under an apex domain (example.com) or your www subdomain (www.example.com), your Free SSL will be cover both the apex and a www subdomain.
- If your StackPath CDN site is created under a subdomain (cdn.example.com, api.example.com), your free SSL certificate will cover only that subdomain. For sites with multiple subdomains, we recommend creating an individual site for each subdomain.
Setting up SSL
You will need access to your DNS provider and your StackPath Control Panel. This article assumes you have created a Stack and CDN Site for your desired delivery domain.
- Login to the StackPath Control Panel
- Select CDN on the left side navigation
- Select the CDN site you want to generate an SSL certificate for
- Verify the CDN site is created under the domain you wish to cover with SSL
- Navigate to the Origin Settings tab and ensure the Delivery Domain is present
- Log into your DNS management and create or edit the CNAME record for your desired subdomain to point it at the StackPath CDN URL for your Site
- Return to the CDN Settings and request the free SSL from the Edge SSL tab
- You will be prompted to add a new CNAME record to your DNS account with the provided values
This is an automatic process if you have already integrated the StackPath DNS.
- Upon creating the CNAME, your request will be checked for verification and final CA Signing and should show as trusted within a few minutes
SSL Renewal
StackPath SSL certificates are generated for 90 days at a time and automatically renewed 30 days before expiration.