Setting up SSL automation with a Content Delivery Network (CDN) is one of the best ways to ensure your site stays fast and secure without you ever having to manually renew a certificate.
In 2026, this process is largely handled by the "handshake" between your CDN provider and your Nixzoehost server. Here is how to set it up correctly.
Step 1: Choose Your Encryption Mode
Before enabling automation, you must decide how the CDN should talk to your Nixzoehost server. Inside your CDN dashboard (like Cloudflare or Nixzoe-Edge), look for the SSL/TLS settings:
-
Full (Strict) Recommended: This is the best setting for Nixzoehost users. It requires a valid certificate on your Nixzoehost server (which our AutoSSL provides automatically). This ensures end-to-end encryption.
-
Full: Encrypts the entire path but doesn't check if the certificate on your server is "official."
-
Flexible: Only encrypts the path from the visitor to the CDN. The path to Nixzoehost remains unencrypted. Avoid this for e-commerce or login pages.
Step 2: Enable "Universal SSL" Automation
Most CDNs provide a free, automated certificate that covers your main domain and subdomains.
-
Log in to your CDN dashboard.
-
Navigate to the SSL/TLS section.
-
Ensure Universal SSL (or "Edge Certificates") is toggled to On.
-
The CDN will now automatically communicate with Certificate Authorities to issue and renew your "Edge" certificate every 90 days.
Step 3: Align with Nixzoehost AutoSSL
For the "Strict" mode to work, your Nixzoehost server needs its own certificate. Our systems handle this via cPanel AutoSSL:
-
Log in to your Nixzoehost cPanel.
-
Go to SSL/TLS Status.
-
Ensure your domains have a Green Padlock. If not, click "Run AutoSSL."
-
Note: If your CDN is active, cPanel might struggle to "see" your server. If AutoSSL fails, temporarily "Pause" your CDN for 5 minutes, run AutoSSL, and then turn the CDN back on.
Step 4: Enable "Always Use HTTPS"
To make the automation useful, you must force all visitors to use the secure connection.
-
In the CDN: Toggle "Always Use HTTPS" to On.
-
In WordPress: Ensure your Site URL and Home URL both start with
https://.
Troubleshooting "Validation Loops"
| Problem | Cause | Solution |
| Error 526 | Your Nixzoehost server's SSL has expired. | Log in to cPanel and click "Run AutoSSL" to refresh the origin. |
| Redirect Loop | CDN is forcing HTTPS, but WordPress is trying to load HTTP. | Set CDN to Full (Strict) and update WordPress settings to https. |
| SSL Not Pending | DNS hasn't propagated yet. | Wait up to 24 hours after changing nameservers for the CDN SSL to activate. |