Managing SSL on High Performance Plans

Table of Contents

Whenever you add a new domain or subdomain, you will need to issue a new SSL certificate for that domain. To do that, click on the SSL/TLS link in the left sidebar.

You will be presented with a screen like this, listing all your domains:

If you have never issued an SSL before, and “Current Certificate Status” is empty, make sure all the domains you want to issue an SSL for are selected, unselect any domains you don’t want to issue SSL for, and then check “Delete All SSL Certs and Regenerate” and click on “OK”. SSL should be issued after a few minutes.

Note: If DNS has not propagated for one or more selected domains, SSL will be in PENDING_VERIFICATION status. Make sure there is a “(Pointed to CynderHost)” badge next to the domains you want to issue SSL for.

If you already have an SSL Certificate active and want to issue SSL for new domains, make sure to select both your old and the new domains you want to issue SSL for.

Then, click “OK” – do not check the “Delete All SSL Certs and Regenerate” box.

After a minute or so, the Certification Status should say “PENDING_VERIFICATION” again and SSL will be issued once the domain is verified.

Note: Like above, if DNS has not propagated for one or more selected domains, SSL will be stuck in PENDING_VERIFICATION status until DNS propagates for all domains. Make sure there is a “(Pointed to CynderHost)” badge next to the domains you want to issue SSL for.

Forcing a Regeneration #

If you see SSL ever stuck in “PENDING_VERIFICATION” or in “FAILED” you may need to regenerate the entire SSL certificate completely. To do so, follow the same process as above, checking all the domains you want to cover with SSL, and then also check the “Delete All SSL Certs and Regenerate” box.

A brand new SSL Cert should now be issued.

Note: Because the certificate is deleted and reset, SSL will show as invalid for users while certificate generation is pending. To minimize any disruption, make sure all domains are pointed to CynderHost that you check (if this is the case, SSL generation usually only takes a minute or two).