Universal CDN allows the installation of custom SSL/TLS certificates for each of the CNAMEs, added to the CDN zone you have created.
To install a custom SSL/TLS for a CNAME (added to your CDN zone), follow the steps outlined below:
1. Log in to the Universal CDN Control Panel at my.ucdn.com.
2. Navigate to the SSL tab located in the top left corner.
3. Click on the Add SSL Certificate button located in the top right corner.
4. Enter the hostname. This is the CNAME that you have created in the DNS zone of your domain to access your CDN resources and for which the certificate has been issued.
The certificate must be valid for the specified CNAME, otherwise, a “Certificate Mismatch” warning message will appear on the browsers.
Be advised that only a wildcard certificate can cover your domain and all of its subdomains.
Three are the available options for uploading the certificate to the CDN edge servers:
1. As ZIP file.
2. As separate files
3. As plain text
Your ZIP file should contain a certificate (*.crt), a private key (*.key), and optionally a CA bundle certificate (*_bundle.crt) file.
Choosing the second option will provide you with an option to upload 3 separate files:
1. Certificate – The SSL certificate. It normally has the file extension *.crt.
2. Key – The private key for the certificate. It normally has the file extension *.key.
3. CA Bundle – (optional) This is a bundle of certificates, provided by the SSL issuer ( *_bundle.crt).
The third option lets you copy and paste the contents of your key and certificates in the text areas. After uploading the files, click on the Add SSL Certificate button located at the bottom of the page.
