Lingo automatically provisions SSL certificates for custom domains to ensure secure connections.
How SSL certificates work
When you add a custom domain:
You configure DNS to point to Lingo
Lingo verifies you own the domain
An SSL certificate is automatically generated
HTTPS is enabled for your custom domain
Certificate provisioning
Automatic provisioning
Certificates are generated via Let's Encrypt
No manual certificate upload required
Certificates auto-renew before expiration
Timing
Initial provisioning: Minutes to a few hours
Depends on DNS propagation speed
Most domains are active within 1 hour
Domain verification
Before issuing a certificate, Lingo verifies domain ownership:
CNAME verification
Your CNAME record pointing to Lingo confirms control
This is the primary verification method
TXT record verification
Some setups require a TXT record
Proves ownership without affecting other DNS settings
Troubleshooting
Certificate not provisioning
Verify DNS records are correct
Check for typos in domain name
Wait for DNS propagation (up to 48 hours)
Ensure no CAA records block Let's Encrypt
Verification failing
Confirm CNAME points to the correct target
Check for conflicting A or AAAA records
Remove any proxy settings that might interfere
Try using a DNS lookup tool to verify records
Certificate expired
Certificates should auto-renew
If expired, check that DNS records are still correct
Contact support if auto-renewal fails
Security notes
All custom domains use HTTPS
HTTP requests redirect to HTTPS automatically
Certificates use modern TLS standards