Getting Started

• Getting Started with Expedited SSL Expedited SSL issues certificates for your Heroku app's custom domains and installs them on your app. You set it up once: pick the names, add one DNS record ...
• Adding the DNS Record Expedited SSL proves you control a name through one CNAME record that you add once. We use it for the first certificate and for every renewal after it.
• CAA Records CAA records list the certificate authorities allowed to issue certificates for your domain. Most domains have none. If yours has none, any authority can issu...
• Heroku ACM and Expedited SSL Heroku Automated Certificate Management (ACM) and Expedited SSL both put a certificate on your app. Use one or the other on an app, not both.
• Private Spaces and Trusted IPs Expedited SSL validates your names through DNS, with the CNAME record you add once. Nothing has to reach your app to get or renew a certificate.
• Removing Expedited SSL Remove the add-on from your app's Resources tab in the Heroku Dashboard, or with the CLI: