AIARCOASC Docs
Sign inStart free

SSL / TLS

Universal DV SSL on every zone, Advanced Certificates, custom certs, mTLS to origin, automatic renewal.

What it is

Every zone gets a free Universal DV certificate covering the apex and one wildcard. Advanced Certificates let you bring multiple SANs and pick the issuer. Custom Certificates accept your own PEM. Origin pull supports mTLS so your origin only trusts AIARCO. All certs auto-renew before expiry.

When to use it

  • Stand up TLS on a new domain in seconds.
  • Bring an existing EV cert without re-issuing.
  • Lock down your origin so only AIARCO can pull (mTLS).

Quickstart

asc edge ssl status example.com
asc edge ssl advanced create example.com --sans api.example.com,www.example.com
asc edge ssl origin-mtls enable example.com --client-cert ./client.pem
client.edge.ssl.advanced.create(zone='example.com', sans=['api.example.com','www.example.com'])
await client.edge.ssl.advanced.create({ zone: 'example.com', sans: ['api.example.com'] });

Limits & quotas

LimitDefaultBurstNotes
DV cert renewal window30 days before expiry—
Advanced certs per hostname$5/mo—See pricing
TLS protocols supported (in)TLS 1.2, TLS 1.3—TLS 1.3 by default
Min cipher suiteAES-128-GCM-SHA256—

Pricing

See pricing. Pay-as-you-go, billed monthly via Stripe.

API surface

  • POST /v1/edge/ssl/advanced
  • POST /v1/edge/ssl/custom
  • POST /v1/edge/ssl/origin-mtls

Required scope(s): edge:write. See Scopes.

Security

All access is authenticated and scoped. See Auth & scopes and Network controls.