Domains & SSL

Crate provides a zero-config SSL experience, handling everything from certificate issuance to automatic renewal without any manual intervention.

Verification Process

To ensure you own the domain, Crate uses a dual-verification strategy:

• Ownership (TXT): Add a specific TXT record to your DNS (e.g., _crate-verification=xyz).
• Routing (CNAME): Point your domain/subdomain to our global edge via a CNAME record.

---

Automatic SSL (ACME)

Once verified, Crate leverages the ACME protocol (Let’s Encrypt) to provision certificates. We support HTTP-01 challenges, which are automatically served by our edge nodes at /.well-known/acme-challenge/.

• Zero Downtime: Certificates are renewed 30 days before expiration.
• Security: Private keys are stored in encrypted hardware security modules (HSM) and are never exposed to your application code.
• Global Propagation: New certificates propagate across our global network in under 60 seconds.

---

Multiple Domains

You can add multiple custom domains to a single organization. Crate will manage the verification and SSL for each one independently.