Skip to content

SSL Certificates

How SSL certificates work in Sproobo and automatic renewal

Sproobo automatically provisions and renews SSL certificates for all your domains using Let's Encrypt. This is handled automatically - no configuration needed.

Automatic SSL

When you add a domain to a deployment, Sproobo automatically:

Automatic SSL Features

  • Certificate Provisioning: Automatically requests SSL certificate from Let's Encrypt
  • Domain Verification: Verifies domain ownership via DNS
  • Certificate Installation: Installs certificate on your server
  • HTTPS Configuration: Configures HTTPS with secure settings
  • HTTP Redirect: Automatically redirects HTTP to HTTPS
  • Certificate Renewal: Automatically renews certificates before expiry

How It Works

  1. 1

    Domain Added

    When you add a domain, Sproobo detects it and starts the SSL provisioning process.
    Sproobo SSL provisioning initiated
    SSL certificate provisioning begins automatically when a domain is added.
  2. 2

    Domain Verification

    Sproobo verifies domain ownership by checking DNS records.
    Sproobo domain verification process
    Domain ownership is verified via DNS before certificate issuance.
  3. 3

    Certificate Request

    Sproobo requests a certificate from Let's Encrypt using the ACME protocol.
    Sproobo Let's Encrypt certificate request
    SSL certificate is requested from Let's Encrypt automatically.
  4. 4

    Certificate Installation

    The certificate is installed on your server and HTTPS is configured.
    Sproobo SSL certificate installation
    SSL certificate is installed and HTTPS is configured automatically.
  5. 5

    Certificate Active

    Your domain is now serving HTTPS traffic with a valid SSL certificate.
    Sproobo SSL certificate active
    Your domain is now serving HTTPS traffic with automatic SSL.

Certificate Status

You can view SSL certificate status in Sproobo:

  1. 1

    View Certificate Status

    Go to Deployment → Settings → Domains to see SSL certificate status for each domain.
    Sproobo SSL certificate status
    View SSL certificate status for each domain.
  2. 2

    Certificate Details

    Each domain shows:
    • Certificate status (Active, Pending, Expired)
    • Issuer (Let's Encrypt)
    • Expiration date
    • Days until renewal
    Sproobo SSL certificate details
    View detailed information about your SSL certificate.

Automatic Renewal

Sproobo automatically renews SSL certificates before they expire:

Renewal Process

  • Renewal Window: Certificates are renewed 30 days before expiry
  • Automatic Process: Renewal happens automatically without intervention
  • Zero Downtime: Renewal is seamless with no service interruption
  • Notifications: You'll be notified if renewal fails

SSL Configuration

Sproobo uses secure SSL/TLS configuration by default:

SSL Settings

  • TLS Version: TLS 1.2 and TLS 1.3 enabled
  • Cipher Suites: Modern, secure cipher suites only
  • HSTS: HTTP Strict Transport Security enabled
  • OCSP Stapling: Enabled for faster certificate validation
  • HTTP Redirect: All HTTP traffic redirected to HTTPS

Certificate Types

Supported Certificates

  • Single Domain: Certificate for one domain (example.com)
  • Wildcard: Certificate for domain and all subdomains (*.example.com)
  • Multiple Domains: SAN certificates for multiple domains

Troubleshooting SSL

Common SSL Issues

  • Certificate Pending: Wait for DNS propagation, can take up to 48 hours
  • Renewal Failed: Check DNS records, verify domain ownership
  • Mixed Content: Ensure all resources use HTTPS
  • Certificate Expired: Automatic renewal may have failed, check domain DNS

Next Steps

Now that you understand SSL certificates: