HTTPS certificates for customer domains
On Growth and up, the edge issues certificates on the first HTTPS request and renews them without DNS access.
For platform engineers, CTOs and support leads at platforms such as Supabase, GitHub Pages and Render.
Certificate jobs on customer domains
Each job with its records, its fit and the docs page behind it.
A certificate for every customer domain
Let's Encrypt issues on the first request once the host is live or propagating, and renewal starts about 30 days before expiry with no DNS access. Webhooks and email warn at 14, 7 and 3 days.
CNAME shop.acme.com edge.customdomain.aiFull fitGrowth and upDocs: CertificatesSSL for SaaS, step by stepCAA records that block issuance
A CAA record at the root that does not allow Let's Encrypt stops issuance for the whole zone. The pre-flight raises it as an advisory, and the fix adds a Let's Encrypt record beside the existing ones.
After go-live: drift and expiry
Monitoring here means DNS record drift and certificate state, not uptime.
DNS drift checks
Every live domain is checked hourly against its records, and drift is confirmed at the zone's own nameservers first. Drift checks watch DNS records. Nothing probes your origin for uptime.
Where your customers' DNS is hosted
Six common providers and the way in each one offers.
| DNS provider | Way in today |
|---|---|
| Cloudflare | sign in |
| NameSilo | one-click |
| GoDaddy | api key |
| Amazon Route 53 | api key |
| Namecheap | by hand |
| Squarespace | by hand |
Common questions
Do customers add a TXT record for the certificate?
No. The edge validates through the domain itself once it points at CustomDomain™, and renewal needs no DNS access.
What happens when a renewal fails?
It is retried, less often after each failure, while the current certificate keeps serving. Webhooks and email warn at 14, 7 and 3 days before an unrenewed certificate expires.
Can I issue the certificates myself?
Yes, by pointing domains at your own infrastructure, which needs no edge plan. The certificate is then yours to issue, and CustomDomain™ still writes and checks the records.
Supabase, GitHub Pages, Render, Let's Encrypt and other names on this page are trademarks of their owners. CustomDomain™ is not affiliated with or endorsed by them. Facts about other products were read from their public pages on October 30, 2026.
Put your customers on their own domains.
Your first ten domains connect free. No card needed to sign up.