Salesforce Docs Portal

Prerequisites for a Custom Domain That Uses Your HTTPS Certificate

Before you serve your domain with an HTTPS certificate that you own, confirm that this domain configuration option applies to your configuration. Then update your DNS configuration, and upload your HTTPS certificate.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: Enterprise, Performance, and Unlimited Editions.
Applies to: Salesforce Sites and LWR, Aura, and Visualforce sites
Tip
Tip Unfamiliar with terms like DNS, CA, and CNAME? See Custom Domain Terminology.
  1. Confirm that your HTTPS certificate meets these requirements.
    1. A certificate authority (CA) signed the certificate, or your CA is prepared to sign your certificate.
    2. The expiration date is a future date.
    3. The certificate matches the domain name. Optionally, use a wildcard or Subject Alternative Name (SAN) certificate.
      For example, to add www.example.com as a domain name in Salesforce, you can use an HTTPS certificate for www.example.com. Or, if your certificate authority supports SAN certificates, you use a SAN certificate that includes www.example.com. To have the certificate cover www.example.com, shop.example.com, and parts.example.com, you can use an HTTPS certificate for *.example.com.
  2. To point your domain directly to the internal canonical name (CNAME) for your org, update DNS. For instructions, see Point Your Custom Domain to Your Salesforce Org.
    If the DNS record for your domain points to a web application firewall (WAF), you can’t use this option. If a third-party service or content delivery network (CDN) serves your domain, you can’t use this option, even if the third party hosts your domain with your HTTPS certificate. In those cases, see Use a Third-Party Service or CDN to Serve Your Custom Domain.
  3. Upload your certificate.
    1. If your CA uses intermediate certificates, see the instructions in the knowledge article, Merge a complete certificate chain for custom HTTPS domains.
    2. To upload your certificate to Salesforce, see Generate a Certificate Signed by a Certificate Authority. You can get the required CA signature as a part of that process.
    3. To import an existing certificate that is already signed, see the knowledge article, Use HTTPS certificate that exists within your Community domain.

See Also