---
schema_version: "1"
id: 1844f0ed75b2a031ab13fa51679bb05b49fb73a5032d3bf7655a0f03b9f4422a
title: SSL Certificates for Custom Domain Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_es_ssl_certificates.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_es_ssl_certificates.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 32160b3f4284972e0052ad97efc0c6f824eba7fbf573a7933cf295c594339680
description: Use a Secure Socket Layer (SSL) certificate to improve the security of your page-based interactions. Give your subscribers and contacts more confidence when they visit pages that you host with Marketing Cloud Engagement. A certificate adds a layer of encryption to the transfer of sensitive or personal information. This encryption helps prevent external parties from accessing information sent to or from your contacts.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# SSL Certificates for Custom Domain Security

Use a Secure Socket Layer (SSL) certificate to improve the security of your page-based interactions. Give your subscribers and contacts more confidence when they visit pages that you host with Marketing Cloud Engagement. A certificate adds a layer of encryption to the transfer of sensitive or personal information. This encryption helps prevent external parties from accessing information sent to or from your contacts.

Marketing admins can secure custom domains that have a DNS Status of **Delegated** or **Self-Hosted**.

## Prerequisites

Configure the Sender Authentication Package (SAP) or Private Domain feature in your account. For more information, contact your account executive.

Each subdomain requires one SSL certificate license.

## SSL Certificate Functionality

Each subdomain requires a unique SSL certificate. Use SSL certificates to secure these content types:

- CloudPages
- Legacy landing pages
- Email tracking links
- View email as a web page links
- Portfolio and Content Builder content

You can configure a domain for a single business unit, or share a domain across many business units. The number of business units that you have doesn’t influence how many certificates you require.

## Certificates Acquired by Salesforce

You can use Salesforce-provided SSL certificates to secure your domains. You acquire these certificates from Salesforce’s certificate authority, and Salesforce manages the renewal of each certificate. Salesforce uses DigiCert as the certificate authority.

When you use a Salesforce-supplied certificate, the custom domain is secured in less than 10 days after you secure the domain with an SSL certificate supplied by Salesforce. When you select this option, you don’t have to take any additional steps to install or renew the certificate.

## Certificates Acquired from a Different Certificate Authority

If you prefer to use your own SSL certificate, you can upload it to Marketing Cloud Engagement. When you bring your own SSL certificate, you’re responsible for renewing and updating it before it expires.

- **[Secure a Domain with an SSL Certificate Supplied by Salesforce](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_custom_domains.htm&release=264.0.0&type=5)**  
    Secure a Sender Authentication Package (SAP) or CloudPages custom domain in Marketing Cloud Engagement using an SSL certificate provided by Salesforce.
- **[Secure a Domain Using a Custom SSL Certificate](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_custom_domain_ssl_certificate.htm&release=264.0.0&type=5)**  
    You can obtain an SSL certificate for Marketing Cloud Engagement from a certificate authority (CA). The CA that you use must let you use your own certificate signing request (CSR) rather than generate one for you. Image domains don’t support customer-supplied certificates, because the service is delivered from a shared infrastructure that uses common certificates. Salesforce uses DigiCert and Amazon as the certificate authorities.