Certificates

HTTPS without a certificate ritual.

Every Switchyard host gets a Let’s Encrypt certificate. We create it when the site is reachable, store it safely, and renew it while it is still valid. Visitors on plain HTTP are redirected to HTTPS once the certificate exists.

A shop storefront with warm interior light
The padlock is the host’s job, not yours.
Issue

When the host is live

We prove control of the site over HTTP and receive a certificate for that hostname. No wildcard puzzles, no email approvals.

Serve

TLS on the public site

The same files you already published are available over HTTPS. Existing links keep working; browsers get a current chain.

Renew

Before anything expires

We watch remaining lifetime and replace certificates in place. You do not upload PEMs or remember a date.

What you do

Point the hostname at Switchyard and keep the site folder published. That is the whole certificate workflow. Staging certificates are available while you test; production certificates are used when you are ready for real visitors.

What we never ask for

No private keys in email. No “paste this into cPanel.” No annual invoice just to keep the lock icon. Certificate management is part of hosting, not an add-on.

Turn HTTPS on with the site