This article explains how to obtain a multi-domain SSL/TLS certificate for use with UltraDNS HTTPS Web Forwarding. UltraDNS does not issue or sell certificates directly. Certificates must be purchased from a trusted Certificate Authority and then uploaded into UltraDNS before they can be used for secure redirects.
When to Use This Article
- You need to forward multiple domains using HTTPS.
- You were told a multi-domain (SAN) certificate is required before DNS updates can proceed.
- You want to secure HTTPS redirects in UltraDNS.
Why a Multi-Domain Certificate Is Required
HTTPS Web Forwarding requires a valid SSL/TLS certificate that matches the domain name being redirected. If you are forwarding multiple domains to a single destination, each domain must be included in the certificate as a Subject Alternative Name (SAN). Without a valid certificate that includes all required domains, secure HTTPS redirects cannot be activated.
How to Obtain a Multi-Domain Certificate
Follow these steps to obtain a certificate that can be used with UltraDNS:
- Select a trusted Certificate Authority. DigiCert is a widely used Certificate Authority and the parent company of UltraDNS. You may also use another trusted provider if preferred.
- Request a multi-domain (SAN) SSL/TLS certificate and specify all domain names that must be secured.
- Complete the Domain Control Validation process required by the Certificate Authority. This may require creating a DNS record such as a CNAME or TXT record in UltraDNS.
- After validation is complete, download the issued certificate files, including the certificate file and private key.
Uploading the Certificate into UltraDNS
Once your certificate has been issued, upload it to UltraDNS:
- Sign in to the UltraDNS Managed Services Portal.
- Click on the drop down arrow next to Domains
- Select Certificate Management.
- Select Upload New Certificate.
- Provide a name for the certificate.
- Upload the certificate file and the corresponding private key file. Include the CA bundle file if provided.
- Select Upload to complete the process.
After the certificate is uploaded and marked as valid, it can be applied to an HTTPS Web Forwarding record.
Verification
A successfully uploaded certificate will display a status of Valid in the Certificate Management dashboard. Once applied to a Web Forwarding record with HTTPS enabled, secure redirects will function without browser certificate warnings.
Important Notes
-
UltraDNS does not sell or directly issue SSL/TLS certificates.
- You would directly purchase SSL/TLS certificates through entities like DigiCert, Let's Encrypt, etc.
- The certificate must be issued by a trusted Certificate Authority. Self-signed certificates are not supported for HTTPS Web Forwarding.
-
If you are working with a DigiCert Account Manager, they can assist with selecting and purchasing the appropriate certificate.
- If you know who your Account Manager is by name, you can use this example of firstname.lastname@digicert.com so John Doe would be john.doe@digicert.com.