# HTTPS

Source: https://docs.fortrabbit.com/platform/domains/https
Updated: 2026-10-23
Reviewed: 2026-10-21

> Every correctly routed domain on fortrabbit gets a TLS certificate at no cost, renewed automatically. The advanced options explained.


## HTTPS on fortrabbit

Every correctly routed external domain gets a TLS certificate, without any setup. Default domains and cloud domains are always served over HTTPS. Certificates renew automatically.

## HTTPS options

The following tips apply to all TLS options on fortrabbit:

### HTTP to HTTPS redirect

fortrabbit answers every request on `http://` with a 301 redirect to `https://`, no setup needed. To make browsers skip `http://` entirely, set [HSTS](/dev/htaccess/hsts).

### Secure your domain with a CAA record

A Certification Authority Authorization (CAA) is a DNS record to specify which certificate authorities (CAs) are allowed to issue certificates for a domain. No additional setup is required on fortrabbit. See if your DNS / domain provider supports CAA entries, set the according identifying domain name. For the free Let's Encrypt certs, see the [Let's Encrypt CAA docs](https://letsencrypt.org/docs/caa). Mind that already existing CAA entries can also become a problem when trying to issue new certificates.

## About HTTPS, TLS & SSL

HTTPS is Hypertext Transfer Protocol Secure. It is used to secure the data transport between a client (browser) and a server. HTTPS is based on TLS (Transport Layer Security), the successor to the still better known SSL (Secure Sockets Layer). HTTPS is considered a standard must have for each website. Browsers show a lock in the address bar if the connection is over HTTPS.

## Troubleshooting HTTPS

The [HTTPS troubleshooting guide](/dev/learn/https-troubleshooting) covers certificate warnings and mixed content.

---

- [Domain](/platform/objects/domain)
- [HTTPS troubleshooting](/dev/learn/https-troubleshooting)