Browse this section

Tag Cloud

billing cloud dedicated managed infrastructure operations private security start storage

Support

TLS certificate issuance and renewal checks

A valid certificate needs the correct names, a trusted chain and a working renewal process. HTTPS protects the connection; it does not prove that the application itself is free of vulnerabilities. Identify who manages certificate renewal for each endpoint.

If issuance or renewal fails

  • Check the hostname, DNS records, expiration date and the exact validation error.
  • Identify whether validation uses an HTTP challenge or DNS records, and verify the required path or DNS changes.
  • Check load balancers, proxies and multiple backend nodes that may answer validation requests.
  • Confirm that the renewed certificate is deployed to the actual public endpoint, then test it externally.

Do not send private keys in tickets. Provide the public hostname and a redacted error instead. DNS validation credentials should have only the permissions required. Ask for a supported renewal design before changing certificate lifetimes or validation methods.

Further reading: Let’s Encrypt: validation challenges

Was this guide helpful?

Related guides

Preparing secure SSH access

Use individually assigned access where practical so changes can be attributed and access can be revoked without affecting everyone. SSH keys are useful for authentication, but the private k…

Requesting a firewall rule without losing access

A firewall request should describe a required communication path, not simply ask to open all traffic. Both provider-side and operating-system rules may affect a connection. Plan the change …

What to send us when you suspect a compromise

Treat unexpected administrator accounts, changed files or suspicious processes as evidence to investigate. A successful malware scan does not establish that a system is clean. Use a trusted…

Container ports and management interfaces

A container being reachable from its host does not mean it should be reachable from the Internet. Published container ports and host firewall settings must be reviewed together. Docker can …

Need help applying this to your service?

Tell us your service reference and what you need to achieve. Never include passwords or private keys in a ticket.

Contact support →
← All knowledgebase topics