SSL CDN: Free Custom SSL for Your CDN

By Jonas Krummenacher
Updated on March 1, 2017
SSL CDN: Free Custom SSL for Your CDN

HTTPS ensures secure communication over the Internet. We offer three options when it comes to an SSL CDN: Shared SSL, Custom SSL with your own certificate, and custom SSL with Let's Encrypt. All methods offer the same security standard and come for free! Yes, even Custom SSL comes for free if you bring your own certificate.

Shared SSL CDN

Shared SSL is ideal to get started within minutes. You only need to enable the option in the dashboard and you're ready to go. Simply use HTTPS when you request files from our CDN.

Why you need a custom SSL

Custom SSL only makes sense if you use CNAMES (Zone Aliases). It's a convenient way to use CNAME in combination with SSL. Using a Zone Alias and or custom CDN URL can be benefical for both branding and SEO.

Custom SSL with certificate

You can either send us your existing certificate or we can issue a certificate. Custom SSL is completely free if you bring your own certificate! Other CDNs charge as much as $7200/year for Custom SSL. Beside a normal certificate, you can also send us wildcard or SAN certificates. In this case you can maintain several CNAMEs if your certificate supports it. Make sure that you update your DNS before you start using your CNAMEs. Our Custom SSL is based on SNI.

Custom SSL with Let's Encrypt integration

KeyCDN also has an integration with Let's Encrypt in which you can use custom SSL for free on a Zone Alias. Let's Encrypt currently offers domain validated certificates. Learn how to use Let's Encrypt with KeyCDN.

Overview of SSL CDN certificates

TopicShared SSLCustom SSLLet's Encrypt
DeploymentInstantly availableDeployment within a dayInstantly available
ValidityValid for one ZoneValid for one or more CNAMEsValid for one Zone
Action steps on your sideNoneSend us your certificate if you want to use your own. Update your DNS!None
CostFreeFree of charge if you bring your certificate!Free
Examplehttps://zonename-hexid.kxcdn.com https://assests.anotherdomain.com

In case you bring your own certificate, please make sure it's valid for at least one year. You can easily check the validity of your certificate with the following command on a unix machine:

openssl x509 -in certificate.crt -text -noout

Alternatively you can check the expiry date of your custom certificate on a site like Certificate Decoder.

Shared SSL is good enough in most cases but as soon as CNAMEs come into play you might consider a Custom SSL CDN. We're happy to support you during the setup. Let us know if you have questions!

  • Share

Supercharge your content delivery 🚀

Try KeyCDN with a free 14 day trial, no credit card required.

Get started


Comment policy: Comments are welcomed and encouraged. However, all comments are manually moderated and those deemed to be spam or solely promotional in nature will be deleted.
  • **bold**
  • `code`
  • ```block```
KeyCDN uses cookies to make its website easier to use. Learn more