SSL Certificates
Encrypt your site, earn the padlock, and boost trust and SEO with industry-standard TLS certificates.
How to secure a domain you own (any registrar)
- Add a domain you own. Works with any registrar — Namecheap, GoDaddy, Cloudflare, Porkbun, Google/Squarespace etc. — just like email. Scroll to Use a domain you already own, type
example.com(e.g.clovisjillshoesstore.comormyshop.co) → Add Domain. Domains bought via Subilex are auto-verified — skip to step 3. You can also addshop.example.comor*.example.comfor wildcard — same TXT flow. - Prove ownership — TXT _subilex-verify (same as email). We show you after Add: Host
_subilex-verify(or_subilex-verify.yourdomain.com— Namecheap/GoDaddy add the domain for you) + Valuesubilex-abc123…token. Create that TXT at your registrar's DNS (Namecheap: Domain List → Manage → Advanced DNS → Add TXT; Cloudflare: DNS → Add record; GoDaddy: DNS → Add), → click Verify Now. Example forclovisjillshoesstore.com: Host_subilex-verify.clovisjillshoesstore.com→subilex-fe6e5cd3b98c567e721b8d25958aa921. DNS can take 5 min–4 h. Same TXT covers both email and SSL — verify once and the domain becomes “verified” for bothroutes/email-providers.js:204+routes/ssl-certificates.js:48. - Pick SSL & add to cart. Below, choose Single Domain SSL $9.99/yr (secures
yourdomain.com + www.yourdomain.com) or Multi-Domain $29.99/yr (up to 5 SANs), select your verified domain from the dropdown (now populated — unverified/p pending are disabled with ✗), → Add to Cart. Unverified domains are blocked until Step 2 passes — same guard as emailroutes/payment.js:14sslDomainError. Tryinfo.clovisjillshoesstore.com+shop.clovisjillshoesstore.comwith Multi. - Pay & install via SSH. Cart → Pay (wallet / Stripe / PayPal — enable auto-renew for yearly renewal). After payment the cert is pending until CA validates the same domain (DV). Then it flips to Active in SSL Settings → download
cert.pem / ca.pemand install via SSH below (Nginx/Apache). Full expiry/auto-renew history is in Settings.
Example — clovisjillshoesstore.com on Namecheap (same steps for GoDaddy/Cloudflare):
TXT _subilex-verify.clovisjillshoesstore.com → subilex-fe6e5c… → Verify → dropdown now shows clovisjillshoesstore.com (verified) → pick Single → Cart. Your CNAME www → clovisjillshoesstore.com. (fix trailing dot to clovisjillshoesstore.com) + A @ → 204.168.174.49 are for the site — keep for the shop, SSL still needs the TXT above.
Use a domain you already own (GoDaddy / Namecheap / Cloudflare …)
We verify ownership via DNS — works with any registrar, same as email. No transfer needed.
How it works: Choose a certificate, enter the domain you want to secure, and add it to your cart. Verified domains only. At checkout you can pay with wallet / Stripe / PayPal. Once payment is complete the certificate is provisioned to your account.
How to install via SSH (after purchase)
We issue via OpenSRS Trust Service (Apache/Nginx compatible PEM). After status becomes Active in SSL Settings, download the cert bundle.
# 1) SSH to your server
ssh user@your-server-ip
# 2) Create cert dir + upload (or paste) the downloaded files
sudo mkdir -p /etc/ssl/yourdomain.com
sudo nano /etc/ssl/yourdomain.com/cert.pem # paste certificate
sudo nano /etc/ssl/yourdomain.com/privkey.pem # paste private key (from CSR generation)
sudo nano /etc/ssl/yourdomain.com/ca.pem # paste CA bundle if provided
# 3) Nginx example
sudo nano /etc/nginx/sites-available/yourdomain.com
# add:
# ssl_certificate /etc/ssl/yourdomain.com/cert.pem;
# ssl_certificate_key /etc/ssl/yourdomain.com/privkey.pem;
# ssl_trusted_certificate /etc/ssl/yourdomain.com/ca.pem;
sudo nginx -t && sudo systemctl reload nginx
# 4) Apache example
# SSLCertificateFile /etc/ssl/yourdomain.com/cert.pem
# SSLCertificateKeyFile /etc/ssl/yourdomain.com/privkey.pem
# SSLCACertificateFile /etc/ssl/yourdomain.com/ca.pem
# sudo apachectl configtest && sudo systemctl reload apache
# 5) Verify
echo | openssl s_client -connect yourdomain.com:443 -servername yourdomain.com | openssl x509 -noout -dates
Full chain + key are generated via openssl req -new -newkey rsa:2048 -nodes -keyout privkey.pem -out csr.pem -subj /CN=yourdomain.com on our side (routes/ssl-certificates.js:48). We store orderId/reference; reissues are free.