> ## Documentation Index
> Fetch the complete documentation index at: https://docs.crazynode.in/llms.txt
> Use this file to discover all available pages before exploring further.

# SSL Certificates

> Enable free HTTPS on your CrazyNode-hosted domains with Let's Encrypt SSL.

Every domain hosted on CrazyNode is eligible for a **free Let's Encrypt SSL certificate**. HTTPS is essential for security, SEO, and browser trust.

## Automatic SSL (recommended)

When you add a domain to your hosting plan, CrazyNode automatically issues and installs a Let's Encrypt certificate within a few minutes.

### Requirements for auto-issue

* The domain's **A record** must point to your CrazyNode hosting IP.
* Port 80 must be reachable (needed for HTTP-01 validation).
* DNS propagation must be complete.

### Verify SSL is active

1. Wait 5–10 minutes after pointing DNS.
2. Visit `https://yourdomain.com`.
3. Look for the padlock icon in your browser.

## Manual issue / reissue

If auto-SSL didn't trigger:

<Steps>
  <Step title="Open the hosting control panel">
    From the client area, click **Manage** on your hosting service.
  </Step>

  <Step title="Navigate to SSL / TLS">
    Find the SSL section (labeled **SSL Status** in cPanel or **SSL** in CyberPanel).
  </Step>

  <Step title="Issue certificate">
    Click **Issue** or **Run AutoSSL** for the affected domain.
  </Step>
</Steps>

## Force HTTPS redirects

Redirect all HTTP traffic to HTTPS by editing `.htaccess`:

```apache theme={null}
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
```

Or enable **Force HTTPS** in the panel's SSL section.

## Wildcard / custom certificates

Wildcard certificates (`*.example.com`) require DNS-01 validation. Contact [support](/support/tickets) to enable wildcard SSL on your account.

You can also upload a certificate from a third-party CA (like DigiCert or Sectigo) via the SSL panel.

<Warning>
  If SSL fails to issue, the most common cause is DNS still pointing elsewhere. Check with `dig yourdomain.com A`.
</Warning>