Certificates you already own
A purchased, EV, wildcard or organisation-validated certificate installed and bound correctly to your site.
SSL setup
Certificate work for the cases automation cannot reach
Most certificates should install themselves, and on our platform they do — free, automatically renewed, no involvement from you. This is the hands-on service for the certificates that do not fit that path.
- No hosting plan neededA free account is all it takes
- Works wherever you hostWith us, another provider or your own servers
- One account, one invoiceAdd hosting or other products whenever you like
If your certificate is ordinary, do not buy this
Automatic HTTPS is included on every plan we sell. Certificates are issued, installed and renewed without anyone asking, and that covers the overwhelming majority of sites — so for most customers this service is unnecessary and we will tell you so.
It exists for the rest: a certificate you bought elsewhere and must use, an intermediate chain that does not resolve cleanly, an EV or wildcard requirement, or an edge configuration with its own rules. That work is fiddly, it fails in ways that are hard to read, and it is worth an engineer's half hour rather than your afternoon.
What this covers
A one-off piece of certificate work, done and verified.
Chains that do not resolve
Missing or misordered intermediates diagnosed and fixed — the usual cause of a certificate that works in one browser and fails in another.
Edge and origin requirements
Configuration where the CDN edge and the origin each need their own certificate behaviour, including strict origin validation.
Verified, not assumed
We check the installed result from outside as a browser sees it, rather than confirming that a file was uploaded.
How it works
Tell us what you need and we will tell you whether you need it.
Describe the certificate
Tell us what you have and what it has to do. If automatic provisioning would cover it, we will say so and you keep your money.
We install and configure
An engineer installs the certificate, resolves the chain and applies the configuration your setup requires.
We verify it externally
We confirm the certificate serves correctly and the chain validates from outside, then hand it back with what we did.
Pricing
A one-off fee for the piece of work. It does not include the price of a certificate you buy from someone else.
SSL Setup
$19.00one-off
Ordinary HTTPS is free and automatic on every plan, including renewal. Pay for this only when your certificate falls outside that.
Why a certificate is worth getting right
A certificate that is subtly wrong does not fail loudly. It validates in the browser you tested and fails in an app, an older client or a payment callback — so the first report usually arrives from a customer who could not check out.
Chain problems in particular are invisible from the machine that installed them, because that machine already holds the intermediate it is failing to send. Verifying from outside is the whole job.
Questions people ask before they buy
Do I need this if I host with you?
Almost certainly not. HTTPS is issued, installed and renewed automatically on every plan at no cost. Buy this only when you have a certificate or a requirement that falls outside automatic provisioning.
Do you sell the certificate itself?
No — this is the work of installing and configuring one. If you have bought a certificate elsewhere, or you need a specific issuer for compliance reasons, this is how it gets put in place properly.
My site says 'not secure' in some browsers but not others.
That is the classic symptom of an incomplete intermediate chain: browsers that already cache the intermediate accept it and the rest do not. It is exactly what this service fixes, and it cannot be diagnosed reliably from the server itself.
Does this cover renewals?
It is a one-off installation. Certificates issued automatically on our platform renew themselves indefinitely; a certificate you supply renews on whatever terms you bought it under.
Can you do this for a site hosted somewhere else?
Yes, and that is one of the main reasons to buy it. On a site we host, free certificates are issued and renewed automatically, so an expired certificate is not a thing that happens there. This service is for a certificate on a server we do not host, or one with requirements the automatic path does not cover.
What kinds of certificate does this cover?
The awkward ones: a certificate you already bought and cannot get installed, a wildcard or multi-domain certificate that has to match a specific chain, a legacy device or appliance that will not take the ordinary path, and a mixed-content problem where the certificate is fine and the site still shows a warning.
How long does it take?
Usually the same working day once we have access, because the work is short and the waiting is nearly always the certificate authority rather than us. We tell you what we are waiting for rather than leaving it quiet.
Help with this
Step-by-step guides from our knowledge base, written for exactly this.
Zinn® SEO how-to: The Setup screen
Step by step in Zinn® SEO: The guided setup: a few questions about your site that set your titles, sitemaps, structured data and social sharing the right way. Run it again whenever your site changes.
Read the guide →Send email through your own Amazon SES account
Connect your own Amazon SES account over SMTP: picking one region and staying in it, Easy DKIM, getting out of the sandbox BEFORE you connect, and why SMTP credentials are not your AWS access key.
Read the guide →Send email through your own SMTP server
Connect your own SMTP server: which port to use and why not 25, the SPF, DKIM, DMARC and reverse-DNS records you have to publish yourself, and why we refuse to fall back to an unencrypted connection.
Read the guide →Tell us what the certificate has to do
Describe your setup and we will tell you whether automatic HTTPS already covers it — and if it does not, exactly what we would do.
Get started