> For the complete documentation index, see [llms.txt](https://clients.medianova.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clients.medianova.com/products/security/ssl-tls-encryption.md).
# SSL/TLS Encryption
**Secure Sockets Layer (SSL)** and **Transport Layer Security (TLS)** are cryptographic protocols that protect data exchanged between clients and servers. Although the term *SSL* is still widely used, modern HTTPS connections rely on TLS.
Medianova CDN uses SSL/TLS certificates to secure HTTPS connections between end users and CDN edge servers.
Depending on your deployment, you can use a shared certificate, upload your own certificate, or request a free certificate through the **SSL / TLS** page in the [Medianova Control Panel](https://cloud.medianova.com).
{% hint style="info" %}
Medianova supports modern TLS versions for secure content delivery. TLS 1.2 and TLS 1.3 are recommended for all deployments.
{% endhint %}
### Why SSL/TLS Matters
SSL/TLS provides several essential security benefits for websites and applications.
* **Confidentiality** – Encrypts data exchanged between clients and servers.
* **Integrity** – Protects data from modification while in transit.
* **Authentication** – Verifies the identity of the website through trusted Certificate Authorities (CAs).
* **Trust** – Enables HTTPS, improving user confidence and browser security indicators.
* **Performance** – Modern TLS versions provide faster and more efficient encrypted connections.
### Supported Certificate Types
Medianova supports the most common SSL/TLS certificate types.
| Certificate Type | Description | Recommended For |
| ---------------------------------- | --------------------------------------------------------- | ------------------------------ |
| **Domain Validation (DV)** | Verifies domain ownership. Fast and simple to issue. | Personal websites, blogs, APIs |
| **Organization Validation (OV)** | Verifies both domain ownership and organization identity. | Corporate websites |
| **Extended Validation (EV)** | Provides the highest level of organizational validation. | Financial services, e-commerce |
| **Wildcard** | Protects a domain and all first-level subdomains. | Multi-subdomain deployments |
| **Subject Alternative Name (SAN)** | Secures multiple domains using a single certificate. | Multi-domain environments |
{% hint style="info" %}
Wildcard and SAN certificates simplify certificate management when serving multiple domains or subdomains.
{% endhint %}
### **How SSL/TLS Works on Medianova CDN**
Two-Layer Encryption Flow
When a client requests content over HTTPS:
1. The client connects securely to the nearest Medianova edge server.
2. The edge server presents a valid SSL/TLS certificate.
3. A TLS handshake establishes an encrypted connection.
4. The CDN serves cached content or retrieves the requested object from the origin.
5. If origin SSL is enabled, communication between the CDN and the origin server is also encrypted.
This process ensures that data remains protected while traveling across the network.
{% hint style="info" %}
The Control Panel provides notifications for important SSL lifecycle events, including certificate validation and provisioning status changes.
{% endhint %}
### Best Practices
For secure and reliable HTTPS delivery:
* Enable HTTPS for every production CDN Resource.
* Prefer TLS 1.3 whenever client compatibility allows.
* Keep SSL certificates valid and renewed before expiration.
* Use Wildcard or SAN certificates when serving multiple domains.
* Ensure every custom CNAME is covered by the selected certificate.
* Serve all website assets over HTTPS to avoid mixed-content warnings.
* Complete DNS validation before using newly requested Free SSL certificates.
### Related Concepts
The following guides explain how to configure SSL/TLS in the Medianova Control Panel
* [Upload and Manage SSL Certificates](/products/security/ssl-tls-encryption/upload-and-manage-ssl-certificates.md)
* [Use Free SSL Certificates](/products/security/ssl-tls-encryption/use-free-ssl-certificates.md)
* [CNAME & SSL](/products/performance-cdn/static-content-delivery/advanced-configuration/cname-and-ssl.md)
* [Extract Certificate and Private Key from a PKCS#12 (.pfx) File](/products/security/ssl-tls-encryption/extract-crt-and-key-files-from-a-pfx-certificate.md)
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://clients.medianova.com/products/security/ssl-tls-encryption.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.