Docs

SSL certificates

Upload, edit, renew, and delete custom SSL/TLS certificates.

What is an SSL certificate?

An SSL/TLS certificate encrypts the connection between the browser and your domain. Lexoya provides a certificate for default domains, and you can upload your own certificate for custom domains.

Certificates page

Open the Certificates menu to see your SSL/TLS certificates. Each row shows:
  • Certificate Name
  • Issuer
  • Supported Domains
  • Expiration Date and Valid, Expired, or days left
  • Algorithm

Upload a certificate

  1. On the Certificates page, click Upload Certificate.
  2. Enter a Certificate Name.
  3. Upload or paste the Public Certificate (.crt).
  4. Upload or paste the Private Key (.key).
  5. Click Upload.
The certificate and key must be a matching pair; otherwise the upload is rejected.
The private key is sensitive. Do not share it and keep it in a safe place.

Bind it to a domain

  1. Open Domains.
  2. Edit a domain or add a new one.
  3. Choose the certificate under Select SSL/TLS Certificate.
  4. Save.
The certificate must cover the domain. For all subdomains, use a wildcard certificate such as *.example.com.

Renewal

  • Uploaded certificates do not renew automatically.
  • The expiration date and days left are shown in the list.
  • Before expiry, replace the certificate from Edit.
To replace it, provide both the new certificate and the new key; one without the other is not enough.

Edit

  1. Click the edit icon next to the certificate.
  2. Change the Certificate Name or replace the certificate and key.
  3. Click Save Changes.

Delete

  1. Click the delete icon.
  2. Confirm.
Deleting a certificate cannot be undone. Domains that used it fall back to the default certificate and no longer have a custom certificate.

Three SSL options

  1. Lexoya certificate: for default project domains.
  2. Uploaded certificate: your own .crt and .key.
  3. DNS provider SSL: such as Cloudflare or ArvanCloud when you do not have a custom certificate.

Related