SSL for Custom Domains

Forge makes securing your websites simple by providing free SSL certificates for both Forge subdomains and custom domains. Our integration with Let's Encrypt ensures your sites are encrypted and secure with minimal setup required.

Overview

When you add a custom domain to your Forge site, SSL certificates are automatically provisioned and configured to ensure secure connections for your visitors.

Subdomain SSL

All .frge.io and .getforge.io subdomains automatically receive a free SSL certificate from Let's Encrypt. No action is required—SSL is pre-configured for these URLs.

Custom Domain SSL

Forge also provides free SSL certificates for your custom domains. With just a few clicks in the site settings, you can enable SSL, ensuring your site is secure and trusted by browsers.

Automatic Renewal

SSL certificates issued through Forge are automatically renewed by Let's Encrypt, so your site stays secure without any maintenance on your part.

Automatic SSL Provisioning

Forge automatically handles SSL certificate creation and management for custom domains:

• Instant Provisioning: SSL certificates are created immediately when you add a custom domain
• Domain Validation: Automatic domain ownership verification
• Certificate Installation: Certificates are automatically installed and configured
• HTTPS Enforcement: All traffic is automatically redirected to HTTPS

Setup Process

Setting up SSL for your custom domains in Forge is quick and straightforward. Follow the steps below to secure your site:

Step 1: Add Your Custom Domain

Follow our guide to setup your custom domain with your domain registrar.

Step 2: Enable SSL

1. Return to the Settings page for your site in Forge
2. Under the SSL section, click Enable SSL
3. Forge will handle the SSL certificate issuance through Let's Encrypt. This process can take a little time to complete

Step 3: Force HTTPS (Optional)

To ensure all traffic to your site is secure:

• In the SSL section, enable the Force HTTPS option
• This will redirect all HTTP traffic to HTTPS, improving security and SEO

SSL Features for Custom Domains

Custom domain SSL certificates include:

• Wildcard Support: Covers all subdomains automatically
• Auto-Renewal: Certificates are renewed automatically
• Strong Encryption: Industry-standard encryption algorithms
• Trust Indicators: Full browser trust and padlock display
• Mixed Content Protection: Automatic HTTPS enforcement

Verification

You can verify SSL certificate status for your custom domain:

• Check for the padlock icon in your browser
• Verify the certificate details in browser settings
• Use online SSL checker tools
• Test HTTPS connections manually

Common Issues

Some common SSL issues with custom domains:

• DNS Propagation: Allow time for DNS changes to propagate
• Certificate Delay: SSL certificates may take a few minutes to provision
• Mixed Content: Ensure all resources use HTTPS
• Browser Cache: Clear browser cache if issues persist

Troubleshooting

If you encounter SSL issues with your custom domain:

1. Verify DNS settings are correct
2. Wait for DNS propagation (up to 48 hours)
3. Check that your domain is properly added to Forge
4. Clear browser cache and cookies
5. Test with different browsers or devices
6. Contact Forge support if issues persist

Managing SSL Certificates

Forge will automatically renew SSL certificates before they expire, ensuring uninterrupted service.

You can monitor the status of your SSL certificate in the SSL section of the site settings.

Best Practices

Follow these best practices for custom domain SSL:

• Always use HTTPS for all resources
• Monitor certificate expiration dates
• Keep DNS settings up to date
• Test SSL configuration regularly
• Use security headers when possible