Private Spaces and Trusted IPs

Expedited SSL validates your names through DNS, with the CNAME record you add once. Nothing has to reach your app to get or renew a certificate.

That means it works where Heroku ACM can’t:

• Apps in Cedar Private Spaces with Trusted IPs, where outside traffic can’t reach the app.
• Wildcard domains on apps in Private Spaces.

Setup is the same as on any other app. See Getting Started with Expedited SSL.

Your status page

For an app in a Private Space, your status page shows the space name and its generation.

The Private Space Single and Private Space Wildcard plans cover the same names as SSL Single and SSL Wildcard, and include help from us with setup. Email support@expeditedsecurity.com to get started.