SSL Certificates
Secure your websites with SSL certificates. CoreSynth offers free Let’s Encrypt or custom certificate upload.
Overview
| Feature | Details |
|---|---|
| Let’s Encrypt | Free, automatic |
| Validity | 90 days (automatic renewal) |
| Custom Certificate | Upload option |
| HTTPS Redirection | Optional |
| Wildcard | Supported |
Let’s Encrypt (Recommended)
What is Let’s Encrypt?
Let’s Encrypt is a free certificate authority providing SSL certificates at no cost. Certificates are automatically renewed every 90 days.
Activating SSL
- Log in to CoreSynth Dashboard
- Go to Web Hosting
- Select your hosting package
- Click SSL in sidebar
- Select domain
- Click Install Let’s Encrypt
After Certificate Request
- System automatically verifies domain ownership
- Certificate is issued within 5 minutes
- HTTPS will be automatically enabled
Note: First certificate issuance may take up to 24 hours depending on DNS propagation.
Wildcard Certificates
Wildcard certificate covers domain and all subdomains:
| Certificate | Covers |
|---|---|
your-domain.com | your-domain.com, www.your-domain.com |
*.your-domain.com | your-domain.com, blog.your-domain.com, shop.your-domain.com, etc. |
Warning: Wildcard certificates require DNS verification.
HTTPS Redirection
Enabling Redirection
After SSL activation, you can enforce HTTPS:
- In SSL section click on domain
- Enable Redirect to HTTPS
- All HTTP traffic will redirect to HTTPS
Effect
| Before | After |
|---|---|
http://your-domain.com | https://your-domain.com |
http://www.your-domain.com | https://www.your-domain.com |
Recommendation: Always enable HTTPS redirect for security and SEO.
Custom Certificate
When to Use Custom Certificate?
- Extended Validation (EV) certificates
- Organization Validation (OV) certificates
- Corporate requirements
Uploading Certificate
- In SSL section click Upload Custom Certificate
- Enter:
| Field | Description |
|---|---|
| Certificate | Content of .crt or .pem file |
| Private Key | Content of .key file |
| CA Bundle | Optional, certificate chain |
- Click Install
Certificate Format
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISA+Z...
[certificate content]
-----END CERTIFICATE-----Private Key Format
-----BEGIN PRIVATE KEY-----
MIIEvgIBADANBgkqhkiG9w0BA...
[key content]
-----END PRIVATE KEY-----Managing SSL Certificates
Certificate Overview
In SSL section you see:
| Data | Description |
|---|---|
| Domain | Domain name |
| Issuer | Let’s Encrypt or custom |
| Validity | Expiration date |
| Status | Active, Expired |
| HTTPS | On/Off |
Let’s Encrypt Renewal
Let’s Encrypt certificates renew automatically 30 days before expiration.
Note: If renewal error appears, check DNS settings.
Deleting Certificate
- In certificate list click Delete
- Confirm deletion
- Website will be accessible via HTTP only
Warning: Deleting SSL may cause browser warnings.
Troubleshooting
Certificate Failed to Issue
Cause: Domain not correctly pointed.
Solution:
- Verify A record via dnschecker.org
- Check domain points to server IP
- Wait for DNS propagation (up to 48 hours)
“Connection Not Secure” Error
Cause: Mixed content (HTTP + HTTPS).
Solution:
- Check page resources
- Ensure all URLs are
https:// - Use Why No Padlock tool
Let’s Encrypt Limit Reached
Cause: Too many issuance attempts.
Solution: Let’s Encrypt has limits:
- 5 certificates per domain per week
- 100 names per certificate
- Wait 7 days or use staging
Wildcard Certificate Failed
Cause: DNS verification not set.
Solution:
- Add TXT record for DNS verification
- Wait for propagation
- Request certificate again
FAQ
How Many SSL Certificates Can I Have?
Unlimited for all your domains. Each package supports SSL for all domains.
How Long Does Issuance Take?
- Let’s Encrypt: 1-5 minutes (first time up to 24 hours)
- Custom Certificate: Immediately after upload
Do You Support Multi-domain Certificates?
Yes, SNI (Server Name Indication) is supported. Each domain can have its own certificate on the same IP.
What Happens After Expiration?
- Let’s Encrypt renews automatically
- Custom certificate requires manual renewal
- Browser warning shows after expiration
Technical Details
Supported Ciphers
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
TLS_AES_128_GCM_SHA256
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-RSA-AES128-GCM-SHA256Protocols
| Protocol | Status |
|---|---|
| TLS 1.3 | Enabled |
| TLS 1.2 | Enabled |
| TLS 1.1 | Disabled |
| TLS 1.0 | Disabled |
| SSL 3.0 | Disabled |
| SSL 2.0 | Disabled |
Next Steps
- Web Hosting — Hosting overview
- Domains — Domain management
- DNS Settings — DNS configuration
Need help? Open a support ticket or ask Alex in your dashboard.