SSL certificates

Every domain you connect gets a free SSL certificate from Let’s Encrypt. Netkeel issues it when you connect the domain and renews it automatically, so you normally have nothing to do.

Preview addresses have their own certificate, managed by Netkeel. See Preview addresses.

Check a certificate

1. Open the website and go to Domains & SSL (under Hosting).
2. The list shows each address with its DNS and SSL status, for example Let’s Encrypt.
3. Click your domain, then the SSL tab.

You see the certificate type, its expiry date and a status: Active, Not issued or Temporary. Temporary means a self-signed certificate is in place and browsers show a warning until a trusted certificate is issued.

Request a new certificate

Request a new certificate to add www, to remove it, or if a certificate shows Not issued.

1. Point the domain to your server first. See DNS records.
2. On the SSL tab, click Request Let’s Encrypt.
3. To cover www too, tick Also include www. followed by your domain. Its DNS record must already point to the server.
4. Click Request certificate.

Issuing takes a few minutes and runs in the background. Follow it in the activity panel; the SSL tab shows the new certificate when it is done.

A new certificate replaces the active one. The www box starts ticked when the current certificate includes www, so it is kept unless you untick it.

When the certificate includes www, visitors to www.example.com are redirected to example.com.

Caution

If www does not point to your server, a request that includes it fails. Point www first, or leave the box unticked.

Force HTTPS

Force HTTPS redirects every HTTP visit to HTTPS. It is on by default.

1. Click your domain under Domains & SSL.
2. On the Settings tab, use the Force HTTPS switch.

You can only turn it on while the domain has a working certificate.

Renewal

Netkeel renews issued certificates automatically before they expire. Keep your domain pointing to the server so renewals can succeed.