SSL certificates
Upload, edit, renew, and delete custom SSL/TLS certificates.
What is an SSL certificate?
An SSL/TLS certificate encrypts the connection between the browser and your domain. Lexoya provides a certificate for default domains, and you can upload your own certificate for custom domains.
Certificates page
Open the Certificates menu to see your SSL/TLS certificates. Each row shows:
- Certificate Name
- Issuer
- Supported Domains
- Expiration Date and Valid, Expired, or days left
- Algorithm
Upload a certificate
- On the Certificates page, click Upload Certificate.
- Enter a Certificate Name.
- Upload or paste the Public Certificate (.crt).
- Upload or paste the Private Key (.key).
- Click Upload.
The certificate and key must be a matching pair; otherwise the upload is rejected.
The private key is sensitive. Do not share it and keep it in a safe place.
Bind it to a domain
- Open Domains.
- Edit a domain or add a new one.
- Choose the certificate under Select SSL/TLS Certificate.
- Save.
The certificate must cover the domain. For all subdomains, use a wildcard certificate such as
*.example.com.Renewal
- Uploaded certificates do not renew automatically.
- The expiration date and days left are shown in the list.
- Before expiry, replace the certificate from Edit.
To replace it, provide both the new certificate and the new key; one without the other is not enough.
Edit
- Click the edit icon next to the certificate.
- Change the Certificate Name or replace the certificate and key.
- Click Save Changes.
Delete
- Click the delete icon.
- Confirm.
Deleting a certificate cannot be undone. Domains that used it fall back to the default certificate and no longer have a custom certificate.
Three SSL options
- Lexoya certificate: for default project domains.
- Uploaded certificate: your own
.crtand.key. - DNS provider SSL: such as Cloudflare or ArvanCloud when you do not have a custom certificate.