Getting Started with Expedited SSL
Expedited SSL issues certificates for your Heroku app’s custom domains and installs them on your app. You set it up once: pick the names, add one DNS record per name. After that, we issue, install and renew the certificate for as long as you keep the add-on.
1. Install the add-on
Install it from the Heroku Elements Marketplace, or with the Heroku CLI:
heroku addons:create expeditedssl:single-cert --app your-app
Pick the plan for the names you want covered (see Plans below).
2. Open it from the Resources tab
In the Heroku Dashboard, open your app, go to Resources, and click Expedited SSL. Heroku signs you in to your setup page. From the CLI, heroku addons:open expeditedssl --app your-app does the same.
3. Pick the names
Your setup page lists the custom domains on your app. Choose the ones the certificate covers. A name has to be a custom domain on the app first; add it with heroku domains:add if it isn’t.
4. Add the DNS record
For each name, add the CNAME record shown on your setup page. The page has steps for your DNS provider and checks for the record while you wait. See Adding the DNS record for details.
5. We issue and install
Once we see the record, we issue your certificate and install it on your app. There is nothing else to do. We renew the certificate before it expires and install the renewal on your app. If something stops a renewal, we email you.
If Heroku Automated Certificate Management (ACM) is on for your app, installing your certificate turns it off. See Heroku ACM and Expedited SSL.
Plans
| Plan | Covers |
|---|---|
| SSL Single | One hostname, such as app.example.com. Or a hostname and its www/apex pair, such as www.example.com and example.com, when both are custom domains on your app. |
| SSL Wildcard | *.example.com and example.com. |
| Private Space Single | The same names as SSL Single, plus your Private Space details on the status page and help from us with setup. |
| Private Space Wildcard | The same names as SSL Wildcard, plus the same Private Space extras. |
Changing names later
Open the add-on and pick the names again. Names you drop stop renewing. Their installed certificate stays on your app until it expires.
Questions
Email support@expeditedsecurity.com.