Domains, DNS and SSL1 min readUpdated

SSL certificates with Let's Encrypt

Free certificates for every domain, issued in seconds and renewed on their own. How it works and what to check.

Every application gets a free Let's Encrypt certificate covering its domains. Certificates renew on their own about a month before they expire.

The certificate card shows until when it is valid and how many days are left.
The certificate card shows until when it is valid and how many days are left.

How issuing works

  1. The server checks that each domain really reaches it over HTTP.
  2. Domains that do not reach it yet are skipped and listed, so one forgotten DNS record never blocks the others.
  3. Let's Encrypt validates the domains and the certificate is installed. nginx reloads without downtime.

Using your own certificate

Need an EV/OV certificate or a wildcard from your provider? Open a ticket with the certificate and its chain; we install it for you.

Behind Cloudflare with the orange cloud on, the certificate still issues: Cloudflare passes the validation request through. Use SSL mode Full (strict) in Cloudflare.

Certificate does not issue? See The SSL certificate does not issue.

Did this solve it? If not, tell us what you see and we look at your server.

Open a ticket

Still stuck? Ask a person.

Tickets go straight to the engineers who run ShopWhizzy servers. Tell us the store, what you see and when it started, and we take it from there.