Spookhost Docs

Appearance

SSL/TLS Certificates ​

To get a HTTPS on your website, you will need to Install an TLS Certificate. You will learn how to get and install a valid, trusted TLS Certificate on your Spookhost website from this guide.

TIP

Free subdomains already have TLS automatically covered and HTTPS is automatically enabled. You do not need to do this if you are using a free subdomain.

INFO

All custom domain websites have self-signed TLS certificates automatically installed, but they are not trusted by browsers. You will need to install a valid, trusted TLS certificate to get HTTPS on your website.

Available Certificate Authorities ​

  • ZeroSSL (Default)
  • Let’s Encrypt
  • Google Trust Services

INFO

You are not limited to these 3 CAs, you can bring your own certificate too!

Available Key Algorithms ​

  • EC 256 (Default)
  • EC 384
  • RSA 2048

INFO

ZeroSSL does not support RSA 2048 in our TLS Tool

Requesting a certificate ​

  1. Login to the Client Portal Create TLS Section.

  2. Type in your domain (e.g. example.com)

    Under “additional options,” you may choose your preferred Certificate Authority and Key Algorithm.

  3. Login to the control panel (or your DNS provider), and create a new CNAME Record

  4. Paste _acme-challenge into the Record Name/Source Field

  5. Paste the whole "Record Content" shown in our Client Portal to the Destination Field.

    Go back to the Client Portal and click “Validate TLS”

  6. Patiently wait for about 2 minutes for the CA to validate the your domain and issue the certificate.

  7. You will get your private key and full certificate chain.

    IMPORTANT

    Private key is sensitive data, DO NOT leak it.

Installing a certificate ​

  1. Login to your space Control Panel, and navigate to SSL/TLS and choose your domain.
  2. Paste in the private key
  3. Paste in the certificate. For maximum compatibility, we recommend pasting the full certificate chain, the “Certificate” box from the Spookhost Client Portal TLS Tool is formatted already, you may paste everything there into the certificate option in the Control Panel

    IMPORTANT

    Private key is sensitive data, DO NOT leak it.

  4. Wait for around 1 hour for the certificate to be deployed
  5. Visit your website with HTTPS.