SSL CDN: Free Custom SSL for Your CDN
HTTPS ensures secure communication over the Internet. We offer three options when it comes to an SSL CDN: Shared SSL, Custom SSL with your own certificate, and custom SSL with Let's Encrypt. All methods offer the same security standard and come for free! Yes, even Custom SSL comes for free if you bring your own certificate.
Shared SSL CDN
Shared SSL is ideal to get started within minutes. You only need to enable the option in the dashboard and you're ready to go. Simply use HTTPS when you request files from our CDN.
Why you need a custom SSL
Custom SSL only makes sense if you use CNAMES (Zone Aliases). It's a convenient way to use CNAME in combination with SSL. Using a Zone Alias and or custom CDN URL can be benefical for both branding and SEO.
Custom SSL with certificate
You can either send us your existing certificate or we can issue a certificate. Custom SSL is completely free if you bring your own certificate! Other CDNs charge as much as $7200/year for Custom SSL. Beside a normal certificate, you can also send us wildcard or SAN certificates. In this case you can maintain several CNAMEs if your certificate supports it. Make sure that you update your DNS before you start using your CNAMEs. Our Custom SSL is based on SNI.
Custom SSL with Let's Encrypt integration
KeyCDN also has an integration with Let's Encrypt in which you can use custom SSL for free on a Zone Alias. Let's Encrypt currently offers domain validated certificates. Learn how to use Let's Encrypt with KeyCDN.
Overview of SSL CDN certificates
| Topic | Shared SSL | Custom SSL | Let's Encrypt |
|---|---|---|---|
| Deployment | Instantly available | Deployment within a day | Instantly available |
| Validity | Valid for one Zone | Valid for one or more CNAMEs | Valid for one Zone |
| Action steps on your side | None | Send us your certificate if you want to use your own. Update your DNS! | None |
| Cost | Free | Free of charge if you bring your certificate! | Free |
| Example | https://zonename-hexid.kxcdn.com | https://cdn.yourdomain.com https://assests.anotherdomain.com | https://cdn.yourdomain.com |
In case you bring your own certificate, please make sure it's valid for at least one year. You can easily check the validity of your certificate with the following command on a unix machine:
openssl x509 -in certificate.crt -text -noout
Alternatively you can check the expiry date of your custom certificate on a site like Certificate Decoder.
Shared SSL is good enough in most cases but as soon as CNAMEs come into play you might consider a Custom SSL CDN. We're happy to support you during the setup. Let us know if you have questions!