[Support Guide] Tips for bringing your own custom SSL certificates to Netlify

[Yessey]

Hi all! I am new here, and I can’t solve the problem of “installing a custom certificate”. Can anyone help me with this problem? I read more posts about this topic, but I still don’t understand some of the points.

[SamO]

Hi, I’m not sure what issue you’re having. What error or issues do you run into when attempting to bring your own SSL certificate?

Can you also share the site you are having this issue with?

[Yessey]

Hi @SamO! Thank you for writing to help me. I created my own site on Netlify; I also purchased a ‘domain name’ for myself; my aim is to change the name of my site using the ‘domain name’ I purchased. I am writing, for example, now my site appears as domainname.netlify.app, I want the site I created to be used with the ‘domain name’ I purchased, such as mydomainname.tech.

The problem I am facing is this: as you can see from the picture I added, Netlify wants us to add certificates to use our own ‘domain name’; I am having trouble here. Actually, I have read the posts on this subject, but I can’t do it.

Posts I read:

Certificate is not a valid PEM certificate

Hi Tried to install my custom SSL certificate. Its a GoDaddy cert I pasted my cert and private key then downloaded GoDaddy cert chain for intermediate certs. However I can’t send the form because it says: certificate is not a valid PEM certificate However if I put my cert to a PEM validator everything seems fine. Any ideas?

[Support Guide] Tips for bringing your own custom SSL certificates to Netlify

Last reviewed by Netlify Support: November 2024 Hi there! While it’s not a very common occurrence, you may decide to bring your own custom TLS/SSL certificate to provide HTTPS for your Netlify site. Here are some tips that might be helpful in that instance. Also, our HTTPS (SSL) docs include guidelines on what you’ll need to enter in the Netlify app and where to go to enter it. If you’re stuck with questions about how to format those items, or you need to work with your external certificate pr…

Create a .pem File for TLS/SSL Certificate Installations

CSR Generator

[luke]

This is not correct:

@Yessey

as you can see from the picture I added, Netlify wants us to add certificates to use our own ‘domain name’;

Netlify will allow you to use your own SSL certificate or you can have us provision SSL for you using Let’s Encrypt. We do not require you to use a third-party SSL certificate but you are free to do so if you want to do so. We at Netlify do not care either way. You are free to do whatever you prefer and we do not attempt to control this decision in any way.

I looked up the real domain and site. The DNS for your domain is misconfigured and you have an inactive Netlify DNS zone. It should be deleted and there is a support guide with an explanation why here:

[Support Guide] How to detect and fix inactive Netlify DNS zones

Last reviewed by Netlify Support - June, 2024 What is an “inactive Netlify DNS zone”? First, it would help to define the term “DNS zone”. Quoting wikipedia, it says: A DNS zone is any distinct, contiguous portion of the domain name space in the Domain Name System (DNS) for which administrative responsibility has been delegated to a single manager. To paraphrase, a DNS zone is a collection of all the DNS records for a production domain. When you add production domains to Netlify DNS we cre…

The solution here will be the following steps:

1. delete the inactive DNS zone at Netlify
2. delete the NS records for the Netlify DNS zone from your registrar’s DNS service
3. add the DNS records at your registrar following the instructions here: Configure external DNS for a custom domain | Netlify Docs
4. Once the DNS records from step 3 exist, click the “Verify DNS configuration” button in the site’s “Domain management” page at Netlify

Step 4 above should start the Let’s Encrypt SSL certificate provisioning process. If it does not, please let us know.