Subtotal | $0.00 |
Go to Account > SSL certificates click "Activate" next to the SSL you want to use, then choose "CDN (automatic setup)".
We'll try to auto-fill your server address based on your domain's DNS records.
If it's blank:
Next, you'll be asked to review your info and click Submit.
If you're activating an OV or EV SSL, you'll also be prompted to enter your company details for validation.
Once you complete these steps, we'll take it from there - automatically setting up the CDN, handling the entire SSL process, and pointing your domain to the CDN once your SSL is installed.
Once you click "Submit", you'll be taken to the SSL details page where you can follow the SSL setup process step by step.
DV SSLs are usually issued within 15 minutes. If you recently changed nameservers, DNS propagation may delay issuance.
OV/EV SSLs require business validation and can take up to 2 weeks.
To view stats or adjust settings:
If you no longer want to use the CDN, you'll need to reissue your SSL with a different setup:
Next, remove CDN DNS records to stop routing traffic through the CDN and point your domain directly to your origin server.
Once the DNS updates, your domain will stop using the CDN and point directly to your server.
This usually means the CDN can't reach your site. A common cause is an HTTPS redirect being set up on your server but no SSL installed on the server side.
How to fix it:
Disable the redirect on the server, or upload any SSL cert - even a self-signed one (#anchor_to_SSL_on_server) - to your server.
If your browser says:
It means your site is using HTTPS, but still loads some elements (images, scripts, fonts) over plain HTTP. Browsers warn or block this because it breaks the secure connection.
How to fix it
Bad example: <script src="http://example.com/script.js"></script>
Good example: <script src="//example.com/script.js"></script>
You may need to update your site address in settings to start with https:// - this will help load all resources securely by default.
The fix is the same as above, but additional steps are required if you installed a self-signed SSL.
When a self-signed SSL is installed on EasyWP, it gets synced to the CDN. This results in the CDN using a self-signed cert, which browsers don't trust, causing security warnings.
To resolve this:
If your domain is using CDN, and only ports 80 and 443 are available, then email ports won't work. That means you can't use your_ssl_domain as your mail server address or an MX record value anymore.
How to fix it:
Emails sent from your domain may fail SPF and DMARC checks after enabling CDN automation. An SPF record uses a domain IP, but your domain now points to a CDN, not your actual mail server.
How to fix it:
Replace "a" with "IP: ip4:1.2.3.4" or "a:server-name.com" - if your server address is a hostname.
Bad example:
v=spf1 a -all
Good example:
"v=spf1 ipv4:1.2.3.4 -all" - if your server address is IP
"v=spf1 a:server-name.com -all" - If your server address is hostname
Need help? We're always here for you.