TLS certificates
Every site gets a managed certificate automatically. We issue it once your DNS points at Cache.bz and renew it 30 days before it expires.
Custom certificates
On Pro plans and above you can upload your own certificate and private key in PEM format. We warn you by email 21 days before an uploaded certificate expires.
Minimum TLS version
The default is TLS 1.2. You can require TLS 1.3 in Site settings → Security.
Origin connections
We connect to your origin over HTTPS when it presents a valid certificate, and fall back to HTTP only if you allow it explicitly.