Removing Expedited SSL

Remove the add-on from your app’s Resources tab in the Heroku Dashboard, or with the CLI:

heroku addons:destroy expeditedssl --app your-app

What happens

• We stop renewing. No new certificates are issued for your names.
• Your certificate stays on your app until it expires. We don’t delete anything on your app. Certificates last about 90 days, and we renew at about two thirds of that, so the installed one has between about 30 and 90 days left.
• Before it expires, put another certificate in place. For example, turn on Heroku ACM with heroku certs:auto:enable --app your-app.

Remove the DNS record

Delete the _acme-challenge CNAME record for each of your names from your DNS. A www/apex pair has two.

If you add Expedited SSL back later, your setup page shows the record to add again.