SSL Certificates

SSL certificates are unique digital signatures of your website, which are necessary for establishing a secure connection between the user and the server. It is particularly important when dealing with sensitive information and conducting financial transactions (HTTPS protocol).

When using the «default domain», the domain is protected by a Common Certificate, and distribution is carried out via the HTTPS protocol. You must upload your personal SSL certificate if you use a personal domain and the HTTPS protocol.

Please note that you cannot use your own certificates in Akamai.

Content distribution through the «default domain» will use the HTTP protocol when you connect your own SSL certificate, because only one certificate can be active at the same time.

Types of SSL Certificates in the Selectel Control Panel

-	Service	Custom	Let’s Encrypt
Available for these providers	Akamai Selectel	Selectel	Selectel
Domains	For the default domain	For custom domains	For all resource domains
Managing	Cannot be managed	Disable Activate Delete	Issue Update Delete
Updating	Automatically	Manually	Automatically

Service SSL Certificate

For the CNAME-records in the ***.selcdn.net or ***.akamaized.net zones, a free service SSL certificate is available. The certificate is issued by the provider and applies to the default domain.

The common SSL certificate is not available when using a custom domain.

The common SSL certificate cannot be changed.

Custom SSL Certificate

To attach a personal SSL certificate to the CDN resource:

1. Go to the Certificates tab in the CDN resource card.
2. Click Add certificate.
3. Go to the Custom tab in the new window.
4. Enter the SSL certificate data and a private key.
5. You can mark a checkbox to activate the certificate right after it is added.
6. Click Add a custom SSL certificate.

The certificate will be attached to the resource and added to the list of custom certificates under Certificates.

Let’s Encrypt

You can issue a Let’s Encrypt certificate after creating the CDN resource. Follow these steps to issue a Let’s Encrypt certificate:

1. Check that the CNAME record for the domains attached to the resource is correct.
2. Go to the Certificates tab in the CDN resource card.
3. Click Add certificate.
4. Click Issue a Let’s Encrypt certificate on the Let’s Encrypt tab in the new window. It usually takes about 15 minutes to issue a certificate. In some cases, it can take up to two hours.

Let’s Encrypt Limitations

Only one Let’s Encrypt certificate can be issued for each CDN resource at a time. A certificate is issued for all domains attached to the CDN resource.

Let’s Encrypt certificates cannot be disabled like custom ones. You cannot reactivate a Let’s Encrypt certificate after deleting it or activating another certificate. You must issue a new one.

If you activate another certificate, the current Let’s Encrypt certificate will be deleted automatically. For Let’s Encrypt certificates, all limitations apply as described in the documentation on the official Let’s Encrypt website.