> For the complete documentation index, see [llms.txt](https://clients.medianova.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clients.medianova.com/products/security/ssl-tls-encryption/use-free-ssl-certificates.md).

# Use Free SSL Certificates

Free SSL certificates allow you to secure your CDN Resources using Let's Encrypt without purchasing or managing a commercial SSL certificate.&#x20;

After requesting a Free SSL certificate, Medianova guides you through the required DNS validation process and automatically issues the certificate once domain ownership has been verified.

Request Free SSL certificates from the **SSL / TLS** page in the [Medianova Control Panel](https://cloud.medianova.com).&#x20;

For the certificate creation workflow, see [**Upload and Manage SSL Certificates**](/products/security/ssl-tls-encryption/upload-and-manage-ssl-certificates.md).

Free SSL certificates require DNS/CNAME validation before they can be issued. The requested domain must resolve to the Medianova edge network.

## Request a Free SSL Certificate

Create a new certificate from the **SSL / TLS** page by selecting **Free SSL** in the certificate wizard.

Configure:

* SSL Certificate Name
* Domain
* Coverage (Single Domain or Wildcard)

After reviewing the configuration, click **Create SSL**.

<figure><img src="/files/s5ME1QFMabKOtBaXc1ct" alt="" width="375"><figcaption></figcaption></figure>

For detailed certificate creation steps, see [**Upload and Manage SSL Certificates**](/products/security/ssl-tls-encryption/upload-and-manage-ssl-certificates.md).

## Complete DNS Validation

After creating the certificate request, Medianova displays the DNS validation dialog.

<figure><img src="/files/qF7EZaiyU0SmHnsSxnhp" alt=""><figcaption></figcaption></figure>

The dialog guides you through the remaining Let's Encrypt validation steps.

{% stepper %}
{% step %}

### Open your DNS provider

Open the DNS management interface where your domain records are managed.

This may be your:

* Domain registrar
* DNS hosting provider

Examples include Cloudflare, Amazon Route 53, GoDaddy, Namecheap, and similar DNS providers.
{% endstep %}

{% step %}

### Add the required CNAME record

The dialog displays the DNS record required to validate your domain.

<table><thead><tr><th width="216.3333740234375">Field</th><th>Description</th></tr></thead><tbody><tr><td><strong>Host / Name</strong></td><td>The hostname that must be created in your DNS zone.</td></tr><tr><td><strong>Value</strong></td><td>The CNAME target provided by Medianova.</td></tr></tbody></table>

Use the copy button next to each field to copy the values directly.

Create the CNAME record exactly as displayed.

{% hint style="info" %}
DNS propagation may take from a few minutes to several hours depending on your DNS provider and DNS TTL settings.
{% endhint %}

#### Where do I add this?

If you are unsure where to create the DNS record, click **Where do I add this?**.

The dialog explains that the CNAME record must be created in the DNS management interface for your domain, typically provided by your domain registrar or DNS hosting provider.
{% endstep %}

{% step %}

### Save & Verify

After publishing the CNAME record, return to the dialog and click **Confirm**.

Medianova automatically begins checking the DNS record. No additional manual verification is required.
{% endstep %}
{% endstepper %}

## Monitor Pending Validation

After clicking **Confirm**, the certificate request appears in the **Pending Validation** section at the top of the **SSL / TLS** page.

<figure><img src="/files/nPIU1AWyq3CVwwQibHL9" alt=""><figcaption></figcaption></figure>

This section is displayed only when one or more Free SSL requests are waiting for validation. If there are no pending requests, it is hidden automatically.

Each request displays:

* Certificate name
* Domain
* Current validation status

Select a request to expand its details.

The expanded view displays:

* Validation instructions
* DNS record type
* Host / Name
* Value
* One-click copy buttons

This allows you to monitor the validation process without leaving the **SSL / TLS** page.

### Validation Status

Each pending request displays its current validation state.

<table><thead><tr><th width="166">Status</th><th>Description</th></tr></thead><tbody><tr><td><strong>Validating DNS</strong></td><td>Medianova is waiting for the required DNS record to propagate and complete domain validation.</td></tr><tr><td><strong>Validation Failed</strong></td><td>Domain validation could not be completed. Review the DNS configuration and retry after correcting the issue.</td></tr></tbody></table>

Once validation succeeds:

* the request is removed from **Pending Validation**;
* the certificate is automatically added to the SSL certificate list.

The Pending Validation section and SSL certificate list refresh automatically as the validation status changes.

## Notifications

Medianova automatically notifies users about important certificate lifecycle events.

Notifications are generated when:

* certificate validation starts;
* validation succeeds;
* validation fails;
* certificate provisioning completes.

Notifications are delivered through:

* Control Panel notifications;
* email notifications sent to the user who created the request and the account owner.

This allows certificate requests to be monitored without continuously refreshing the SSL / TLS page.

## Manage Pending Requests

The expanded Pending Validation view provides the following actions.

<figure><img src="/files/YOxdBjFC6tmfoHyRKGEQ" alt="" width="563"><figcaption></figcaption></figure>

### Instructions

Opens the DNS validation guidance directly from the Control Panel.

### Cancel

Cancels the pending certificate request.

After confirmation, the request is removed from the Pending Validation list.

## Automatic Renewal

Free SSL certificates issued through Let's Encrypt are renewed automatically before expiration.

No manual renewal is required as long as:

* the domain continues to resolve to the Medianova edge network;
* DNS validation requirements remain valid.

## Troubleshooting

### Validation is taking longer than expected

Verify that:

* the required CNAME record has been created correctly;
* the Host / Name and Value exactly match the values provided by Medianova;
* the DNS record has propagated successfully.

### Validation failed

Validation failures are commonly caused by:

* incorrect CNAME values;
* missing DNS records;
* conflicting DNS validation records.

Correct the DNS configuration and retry the validation after DNS propagation.

### Certificate does not appear in the SSL list

The certificate is added to the SSL certificate list only after successful domain validation.

If the request is still displayed in **Pending Validation**, wait for DNS propagation or review the validation status.

## Related Concepts

* [Upload and Manage SSL Certificates](/products/security/ssl-tls-encryption/upload-and-manage-ssl-certificates.md)
* [SSL / TLS Encryption](/products/security/ssl-tls-encryption.md)
* [CNAME & SSL](/products/performance-cdn/static-content-delivery/advanced-configuration/cname-and-ssl.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://clients.medianova.com/products/security/ssl-tls-encryption/use-free-ssl-certificates.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
