SSL / HTTPSFree SSL, issued and renewed for you.
Once your domain is active, nsin issues a certificate for it, renews it before it expires and serves your site over HTTPS from the edge. There is nothing to buy and nothing to install on your server.
Automatic from the first day
With Managed DNS, the certificate covers your domain and its proxied hostnames. A new subdomain is added to the certificate automatically, and the SSL page flags any hostname that is not covered yet.
- Issued and renewed with no action from you
- Wildcard certificates for *.your-domain
- Issuer, expiry and covered hostnames in one view
Works with External DNS too
If you keep DNS at your own provider, the CNAME record that verifies the domain also issues and renews a certificate covering the domain and its wildcard.
- One CNAME for verification and SSL
- Covers example.com and *.example.com
- CAA problems are flagged on the SSL page
Bring your own, and harden it
Upload a certificate and private key in PEM and choose which hostnames it serves. Add HSTS and a minimum TLS version per domain when you are ready to refuse plain HTTP for good.
- Custom certificate upload with full chain
- HSTS and minimum TLS version per domain
- HTTPS stays valid at the edge if your origin is down
Frequently asked questions
Is SSL really free on nsin?
Yes. Certificates are issued and renewed automatically at no cost, including wildcards.
Do I need to install anything on my server?
No. The certificate lives at the nsin edge, which is what visitors connect to. Your server needs nothing new.
Can I use my own certificate?
Yes. Upload the certificate with its full chain and private key. A custom certificate does not renew itself, so upload a new one before it expires.
What happens when the certificate is about to expire?
nsin renews automatic certificates before they expire. The SSL page shows the days left and lets you trigger a fresh issuance yourself.