Quick tipHow toContent Hub

SSL certificates on HubSpot domains

HubSpot issues and renews standard SSL for you.

Subscription
All CMS tiers; custom certificates need the Custom SSL add-on
Permissions
Domain settings access
Time
3 min · Intermediate
Last verified

Short answer

HubSpot's KB: HubSpot provisions a standard SAN SSL certificate through Google Trust Services when you connect a domain. If your site already has SSL, use pre-provisioning during connection. Certificates renew 30 days before expiry, which needs the domain CNAME to still point to HubSpot. Other certificates need the Custom SSL add-on; you can't bring a pre-existing certificate.

1. Domains

Domain settings in my demo portal.

Domains and URLs page with the brand domain limit notice and the SSL activation message highlighted
The brand domain notice (top) and the SSL activation message (bottom).

2. Proxies

Reverse proxy domains may need a DCV record. See reverse proxies.

3. Related

Cloudflare DNS.

Sources

New field notes by email

One email when a new article publishes.

Still stuck?

If this did not fix it, the problem is probably specific to your setup. Book a call and we will look at it together.

Book a call with Sam