> ## Documentation Index
> Fetch the complete documentation index at: https://docs.breezehost.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# SSL Certificates & Domain Management

> Secure your website with SSL, manage domains, and configure DNS

# SSL Certificates & Domain Management

Secure your website with HTTPS and effectively manage your domains through Plesk.

## Why SSL Matters

HTTPS (Secure HTTP) with SSL certificates protects your visitors:

* **Encryption**: Data is encrypted between browser and server
* **Authenticity**: Visitors see your domain is verified
* **Trust**: Green lock icon shows the site is secure
* **SEO**: Google ranks HTTPS sites higher
* **Compliance**: Required for PCI, HIPAA, GDPR compliance

## Let's Encrypt (Free SSL)

Breeze provides free SSL certificates through Let's Encrypt, auto-renewing forever.

### Installing Let's Encrypt

<Steps>
  <Step title="Navigate to SSL/TLS Certificates">
    In Plesk:

    1. Go to Websites & Domains
    2. Click your domain
    3. Click "SSL/TLS Certificates"
  </Step>

  <Step title="Get Let's Encrypt Certificate">
    Click "Get Let's Encrypt Certificate"
  </Step>

  <Step title="Choose Domain Names">
    Select which domain variations to secure:

    * example.com
    * [www.example.com](http://www.example.com)
    * Any subdomains
  </Step>

  <Step title="Request Certificate">
    Click "Request" or "Get Certificate"
  </Step>

  <Step title="Verify Domain Ownership">
    Wait for Plesk to verify you own the domain (usually instant)
  </Step>

  <Step title="Installation">
    Plesk automatically installs the certificate (1-2 minutes)
  </Step>

  <Step title="Verify HTTPS">
    Visit [https://your-domain.com](https://your-domain.com) and check for green lock
  </Step>
</Steps>

### Automatic Renewal

Let's Encrypt certificates expire every 90 days. Plesk automatically renews them:

* Renewal happens 30 days before expiration
* No action needed from you
* Plesk notifies you if renewal fails
* Your site stays secure

<Tip>
  Let's Encrypt is free forever and Plesk handles all renewals automatically. Use it for all your domains.
</Tip>

## Custom SSL Certificates

If you purchase a certificate from another Certificate Authority (Comodo, GlobalSign, DigiCert):

### Installing a Custom Certificate

<Steps>
  <Step title="Purchase Certificate">
    Buy a certificate from any Certificate Authority
  </Step>

  <Step title="Receive Certificate Files">
    You'll receive:

    * Certificate file (.crt)
    * Private key (.key)
    * CA certificate/chain (.ca-bundle or .pem)
  </Step>

  <Step title="Go to SSL/TLS Certificates">
    In Plesk:

    1. Websites & Domains
    2. Select your domain
    3. Click "SSL/TLS Certificates"
  </Step>

  <Step title="Add Custom Certificate">
    Click "Add Custom Certificate" or "Upload"
  </Step>

  <Step title="Upload Files">
    Paste or upload:

    * Certificate (CRT file)
    * Private Key (KEY file)
    * CA Certificate (if provided)
  </Step>

  <Step title="Install">
    Click "Install" or "Save"
  </Step>

  <Step title="Verify">
    Test at [https://your-domain.com](https://your-domain.com)
  </Step>
</Steps>

<Warning>
  Keep your private key safe. Never share it or upload to untrusted places. Only Breeze (via Plesk) needs access.
</Warning>

## Domain Management

### Adding Additional Domains

Host multiple websites on one hosting account.

<Steps>
  <Step title="Navigate to Websites & Domains">
    In Plesk main menu, click "Websites & Domains"
  </Step>

  <Step title="Click Add Domain">
    Click "Add Domain" or "Add Website"
  </Step>

  <Step title="Enter Domain Name">
    Type your domain (e.g., example2.com)
  </Step>

  <Step title="Configure Domain Type">
    Choose:

    * **Addon Domain**: Separate website (new folder)
    * **Subdomain**: Part of parent domain ([www.example.com](http://www.example.com))
    * **Domain Alias**: Same site, different name
  </Step>

  <Step title="Set Document Root">
    Choose or create folder for website files:

    * New domains: create new folder
    * Subdomains: can reuse parent folder or create new
  </Step>

  <Step title="Enable SSL">
    Enable Let's Encrypt during setup (optional, can add later)
  </Step>

  <Step title="Save">
    Click "OK" to add domain
  </Step>

  <Step title="Update DNS">
    Point domain at your registrar to your server IP
  </Step>
</Steps>

### Domain Aliases

Point multiple domain names to the same website:

<Steps>
  <Step title="Select Primary Domain">
    In Websites & Domains, click your main domain
  </Step>

  <Step title="Find Domain Aliases">
    Scroll down to "Domain Aliases" section
  </Step>

  <Step title="Add Alias">
    Click "Add Domain Alias"
  </Step>

  <Step title="Enter Domain Name">
    Type the additional domain (e.g., example.net)
  </Step>

  <Step title="Save">
    Click "OK"
  </Step>

  <Step title="Point at Registrar">
    Update DNS to point new domain to your server IP
  </Step>
</Steps>

Benefits of aliases:

* No duplicate content (one folder, multiple names)
* Cost-effective (use one hosting account)
* SEO-friendly (no duplicate site issues)

### Subdomains

Create subdomains for different sections (blog.example.com, shop.example.com):

<Steps>
  <Step title="Select Your Domain">
    In Websites & Domains, click your main domain
  </Step>

  <Step title="Find Subdomains">
    Look for "Subdomains" section
  </Step>

  <Step title="Add Subdomain">
    Click "Add Subdomain"
  </Step>

  <Step title="Enter Subdomain Name">
    Type just the subdomain part (e.g., "blog" for blog.example.com)
  </Step>

  <Step title="Choose Document Root">
    * Reuse parent folder: subdomain shows same content
    * New folder: separate content for subdomain
  </Step>

  <Step title="Save">
    Click "OK"
  </Step>
</Steps>

### Removing Domains

Delete a domain you no longer need:

1. Go to Websites & Domains
2. Click the domain to remove
3. Click "Remove" or "Delete"
4. Confirm the deletion
5. DNS will stop pointing (domain goes to registrar's settings)

<Warning>
  Removing a domain deletes all associated files and databases. Backup first if you may need the content later.
</Warning>

## DNS Management

### Using Plesk Nameservers

If your plan includes Plesk-managed DNS:

1. At your domain registrar, change nameservers to:
   * ns1.breezehost.xyz (or Plesk-provided nameservers)
   * ns2.breezehost.xyz
   * (Exact nameservers in your welcome email)

2. DNS changes take 24-48 hours to propagate

3. Plesk automatically manages DNS for your domains

### Using Your Own DNS Provider

If you manage DNS elsewhere (Route53, Cloudflare, etc.):

1. In your DNS provider, create A records:

| Type | Name | Value          |
| ---- | ---- | -------------- |
| A    | @    | Your server IP |
| A    | www  | Your server IP |

2. Replace "your-domain.com" with your actual domain

## Pointing Your Domain to Breeze

### Method 1: Nameservers (Full DNS Control)

Best if you want Plesk to manage all DNS:

1. **Get Breeze Nameservers**: From your welcome email or Plesk
2. **Log into Registrar**: GoDaddy, Namecheap, etc.
3. **Find DNS Settings**: Look for "Nameservers" or "Name Servers"
4. **Replace Nameservers**:
   * Remove current nameservers
   * Add Breeze nameservers:
     * ns1.breezehost.xyz
     * ns2.breezehost.xyz
5. **Save Changes**: Click "Save" or "Update"
6. **Wait for Propagation**: 24-48 hours (usually faster)

### Method 2: A Records (Your Own DNS)

If you manage DNS yourself or use Cloudflare:

1. **Get Your Server IP**: From your hosting account
2. **Log into Registrar DNS**: Usually in Registrar account settings
3. **Add A Record**:
   * Name/Host: @ (or leave blank)
   * Type: A
   * Value: Your server IP (e.g., 203.0.113.42)
   * TTL: 3600
4. **Add www Subdomain**:
   * Name/Host: www
   * Type: A
   * Value: Same server IP
5. **Save**: Click "Save" or "Confirm"

### Verify Domain Points Correctly

Test your domain configuration:

**On Mac/Linux:**

```bash theme={null}
nslookup your-domain.com
dig your-domain.com
```

**On Windows:**

```cmd theme={null}
nslookup your-domain.com
```

You should see your server IP address in results.

**Visual Check:**

* Visit [http://your-domain.com](http://your-domain.com) (should load your site)
* Check SSL: [https://your-domain.com](https://your-domain.com) (should be secure)

## Troubleshooting

### Domain Shows Wrong Site

**Problem**: Domain points to wrong website or old content

**Solution**:

1. Check document root is correct in Plesk
2. Verify DNS is pointing to correct server IP
3. Check File Manager for correct files in that domain's folder
4. Clear browser cache (Ctrl+Shift+Delete)
5. Wait 24 hours for full DNS propagation

### HTTPS Shows Security Warning

**Problem**: Browser shows security warning on HTTPS site

**Solution**:

1. Verify domain is pointing to server (DNS propagation)
2. In Plesk, request Let's Encrypt certificate
3. Wait 5-10 minutes for installation
4. Hard refresh browser (Ctrl+Shift+R)
5. Test on [https://www.ssllabs.com/ssltest](https://www.ssllabs.com/ssltest) for details

If still issues:

1. Check certificate details in browser (View Certificate)
2. Verify certificate matches your domain
3. Contact support if certificate won't install

### Certificate Renewal Failed

**Problem**: "Certificate renewal failed" notification

**Solution**:

1. Check domain is still pointing to server
2. Verify www and non-www versions are both working
3. In Plesk, manually request new certificate
4. Check error message for specific issue
5. Contact support with error details

### DNS Changes Taking Too Long

**Problem**: DNS changes haven't propagated after 48 hours

**Solution**:

1. Verify you saved DNS changes at registrar
2. Clear your computer's DNS cache:
   * **Mac**: `sudo dscacheutil -flushcache`
   * **Windows**: `ipconfig /flushdns`
3. Try different DNS servers (8.8.8.8, 1.1.1.1)
4. Check current DNS with `nslookup`
5. Contact your registrar if still wrong after 48 hours

### Old Domain Alias Still Points to Old Site

**Problem**: Domain alias created but still shows old content

**Solution**:

1. Ensure DNS propagation complete (48 hours)
2. Clear browser cookies and cache
3. Try in private/incognito window
4. Test with curl or wget from terminal to bypass cache

## Best Practices

### Security

* Always use HTTPS (enable Let's Encrypt)
* Use strong domain registrar passwords
* Enable two-factor authentication at registrar
* Keep renewal information up to date

### Organization

* Keep domain names organized in Plesk
* Document which domain is which website
* Use consistent naming (www, non-www)
* Monitor domain expiration dates

### Performance

* Redirect www to non-www (or vice versa) to avoid duplicate content
* Use appropriate SSL certificates for all domains
* Monitor SSL certificate expiration dates
* Keep DNS records clean and simple

### DNS Management

* Regularly backup DNS records
* Use lowercase domain names
* Avoid too many DNS entries
* Monitor DNS propagation after changes

## Next Steps

<CardGroup cols={2}>
  <Card title="Deploy Your Website" icon="upload" href="/web-hosting/deploy-website">
    Upload files, install WordPress, or deploy your application
  </Card>

  <Card title="Plesk Panel Guide" icon="table-columns" href="/web-hosting/plesk-panel">
    Master all Plesk features and settings
  </Card>

  <Card title="Getting Started" icon="rocket" href="/web-hosting/getting-started">
    Return to initial setup and hosting configuration
  </Card>
</CardGroup>

<Tip>
  Remember: Breeze doesn't sell domains. You manage your domain at your registrar (GoDaddy, Namecheap, etc.) and point it to Breeze through DNS. This gives you complete freedom and ownership of your domain.
</Tip>