TL;DR Let's Encrypt
Let's Encrypt SSL certificates are provisioned and renewed automatically on every CloudSonic hosted site. You never need to think about certificate expiry again.
Let's Encrypt is a free, automated certificate authority that issues and renews SSL certificates for any domain using the ACME protocol. Every site hosted on CloudSonic gets a valid Let's Encrypt certificate provisioned automatically during setup and renewed automatically before expiry. You never need to purchase a certificate, upload it manually, or worry about expiry causing a security warning for your visitors.
Let's Encrypt for Automatic SSL on CloudSonic
CloudSonic provisions Let's Encrypt certificates automatically during site setup using Certbot, with renewal handled automatically before expiry so you never need to think about certificate management. The certificate covers both the root domain and the www subdomain by default, and renewal runs in the background without any downtime or interruption to your site. For sites behind Cloudflare Enterprise, SSL termination happens at the Cloudflare edge with a separate certificate, and the connection between Cloudflare and your origin server is also encrypted with a CloudSonic-managed origin certificate.
Useful Commands
sudo certbot certonly --nginx -d yourdomain.com -d www.yourdomain.com