TLS certificates and HTTPS

Every site on 8Deploy is served over HTTPS with a free TLS certificate that renews itself. There is nothing to buy, nothing to install and nothing to remember.

How it works

When your domain starts pointing at us, we issue a certificate for it automatically, usually within a few minutes. It covers the domain and the www version, and any subdomains you have added. Before it expires, we renew it. You will never get an email asking you to do anything about it.

Why HTTPS matters

• Browsers mark sites without it as Not secure, which loses you customers
• Search engines prefer it
• Anything a visitor types into your site, including a password or a card number, is protected in transit
• Some browser features simply refuse to work without it

"Your connection is not private"

If a browser warns about your site, work through this:

The domain is not pointing at us yet. A certificate cannot be issued for a domain that does not resolve to us. Check the domain's page in your panel.

You have just changed DNS. Give it a few minutes after the domain starts resolving to us.

You are using a subdomain we do not know about. Add it in Domains and a certificate will be issued for it.

The date on your own computer is wrong. A clock that is badly wrong makes every certificate on the internet look invalid. Check yours.

Mixed content warnings

If your site loads over HTTPS but a padlock does not appear, something on the page is being loaded over plain HTTP, usually an image or a script with a hard-coded old address. Find it and change the address to https://, or make it relative. On WordPress this often appears after a migration, and updating the site address in settings and running a search-and-replace over the database usually resolves it.

Do I need to redirect HTTP to HTTPS?

It is done for you. Visitors who type the plain address are sent to the secure one.

If it still will not issue

Email [email protected]. Tell us the domain and we will look at why.