SSL Certificates

Secure your deployments with HTTPS.

Automatic SSL

All Irresistible deployments automatically get SSL certificates:

• Free Let’s Encrypt certificates
• Auto-renewal every 60 days
• No configuration required
• Wildcard certificate support

How It Works

1. Domain Verification: We verify domain ownership via DNS
2. Certificate Request: Automatically request from Let’s Encrypt
3. Installation: Certificate installed on edge servers
4. Renewal: Automatic renewal before expiration

Certificate Details

Supported Types

• Single domain: example.com
• Wildcard: *.example.com
• Multi-domain (SAN): Multiple domains on one cert

Security Features

• TLS 1.2 and 1.3 only
• Strong cipher suites
• HSTS headers enabled
• Perfect Forward Secrecy

Custom Certificates

For enterprise customers, upload your own certificates:

irresistible certs upload 
  --domain example.com 
  --cert cert.pem 
  --key private.key 
  --chain chain.pem

SSL Configuration

Force HTTPS

Automatically redirect HTTP to HTTPS:

// irresistible.config.js
export default {
  security: {
    forceHTTPS: true
  }
}

HSTS Settings

export default {
  security: {
    hsts: {
      maxAge: 31536000,
      includeSubDomains: true,
      preload: true
    }
  }
}

Monitoring

Certificate Status

View certificate details in the dashboard:

• Expiration date
• Issuer information
• Domain coverage
• Renewal status

Alerts

Get notified about certificate issues:

• 30 days before expiration
• Renewal failures
• Configuration problems

Troubleshooting

Certificate Not Issued

• Verify DNS configuration
• Check CAA records
• Ensure domain is accessible

Mixed Content Warnings

• Update asset URLs to HTTPS
• Check third-party scripts
• Use protocol-relative URLs

Certificate Errors

• Clear browser cache
• Check certificate chain
• Verify domain matches certificate