SSL certificates
Let's Encrypt is automatic. Here's how to bring your own.
Free SSL via Let's Encrypt is automatic for every domain you attach to a Web Hosting service. It auto-renews every 60 days.
Confirming SSL is active
- HTTPS works on the domain.
- Browser shows a padlock.
- Panel → SSL/TLS Certificates shows the cert with renewal date.
Force HTTPS
Panel → Hosting Settings → tick Permanent SEO-safe 301 redirect from HTTP to HTTPS. Apply. Done.
Bringing your own cert
If you have a paid cert (EV, wildcard, custom CA):
- Panel → SSL/TLS Certificates → Add SSL/TLS Certificate
- Upload the cert + key + (if needed) the CA bundle
- Assign it to the domain
Renewal is on you — Let's Encrypt auto-renew only manages the Let's Encrypt-issued cert.
Wildcards
Let's Encrypt issues wildcards via DNS-01 challenge. The panel handles this automatically if your DNS is at Suzko (the panel publishes the challenge record on your behalf). For external DNS, you'll need to add the TXT record manually when the panel prompts.
SSL keeps failing
Most common reasons:
- DNS isn't pointing to the service yet. Let's Encrypt fetches a file over HTTP-01 — if the domain doesn't resolve to us, the challenge fails. Wait for DNS to propagate.
- HTTP-01 is blocked. Some firewalls or CDNs block the challenge path. Disable proxy/CDN during issuance, then re-enable.
- Rate limit hit. Let's Encrypt has issuance limits per domain per week. If you've been retrying constantly, wait an hour.