--- schema_version: "1" id: 39935383cb00357695caa55a7213317be7146d7f6e908e7d4358d6f774ca361f title: Prerequisites for a Custom Domain That Uses Your HTTPS Certificate collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/domain_mgmt_cert_prereqs.md canonical_url: https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_cert_prereqs.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 310fd0e700882ea7932cc452c041485a2e1ed406dc3212453a63b2395cef39ff description: Before you serve your domain with an HTTPS certificate that you own, confirm that this domain configuration option applies to your configuration. Then update your DNS configuration, and upload your HTTPS certificate. products: - Salesforce Platform - Security release: "264" --- # Prerequisites for a Custom Domain That Uses Your HTTPS Certificate Before you serve your domain with an HTTPS certificate that you own, confirm that this domain configuration option applies to your configuration. Then update your DNS configuration, and upload your HTTPS certificate. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Enterprise, Performance, and Unlimited Editions.
Applies to: Salesforce Sites and LWR, Aura, and Visualforce sites
![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_tip.png) Tip Unfamiliar with terms like DNS, CA, and CNAME? See [Custom Domain Terminology](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_terms.htm&release=264.0.0&type=5 "Review the terms related to setting up a custom domain in Salesforce."). 1. Confirm that your HTTPS certificate meets these requirements. 1. A certificate authority (CA) signed the certificate, or your CA is prepared to sign your certificate. 2. The expiration date is a future date. 3. The certificate matches the domain name. Optionally, use a wildcard or Subject Alternative Name (SAN) certificate. For example, to add www.example.com as a domain name in Salesforce, you can use an HTTPS certificate for www.example.com. Or, if your certificate authority supports SAN certificates, you use a SAN certificate that includes www.example.com. To have the certificate cover www.example.com, shop.example.com, and parts.example.com, you can use an HTTPS certificate for \*.example.com. 2. To point your domain directly to the internal canonical name (CNAME) for your org, update DNS. For instructions, see [Point Your Custom Domain to Your Salesforce Org](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_update_dns.htm&release=264.0.0&type=5 "Before you add a domain in Salesforce, point your domain to your Salesforce org in Domain Name Service (DNS). If your custom domain uses your HTTPS Certificate or the Salesforce content delivery network (CDN) partner, add a canonical domain name (CNAME) record for your fully qualified domain (FQDN) to DNS. The CNAME record references your Salesforce org ID and your FQDN. Then, if you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, add a second CNAME record that our CDN partner requires."). If the DNS record for your domain points to a web application firewall (WAF), you can’t use this option. If a third-party service or content delivery network (CDN) serves your domain, you can’t use this option, even if the third party hosts your domain with your HTTPS certificate. In those cases, see [Use a Third-Party Service or CDN to Serve Your Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_external_host.htm&release=264.0.0&type=5 "Use a domain that’s hosted by a third-party service to serve your Experience Cloud sites or Salesforce Sites. These third-party services include third-party hosts, web application firewalls (WAFs), and non-Salesforce content delivery networks (CDNs)."). 3. Upload your certificate. 1. If your CA uses intermediate certificates, see the instructions in the knowledge article, [Merge a complete certificate chain for custom HTTPS domains](https://help.salesforce.com/s/articleView?id=000386535&type=1&language=en_US). 2. To upload your certificate to Salesforce, see [Generate a Certificate Signed by a Certificate Authority](https://help.salesforce.com/s/articleView?id=xcloud.security_keys_uploading_signed_cert.htm&type=5&language=en_US). You can get the required CA signature as a part of that process. 3. To import an existing certificate that is already signed, see the knowledge article, [Use HTTPS certificate that exists within your Community domain](https://help.salesforce.com/s/articleView?id=000387916&type=1&language=en_US). #### See Also - [Custom Domains](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt.htm&release=264.0.0&type=5 "Provide a branded experience for users who access your external-facing Salesforce content by serving your Digital Experiences or Salesforce Sites on a domain that you own, such as https://www.example.com.") - [Set Up a Custom Domain That Uses Your HTTPS Certificate](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_cert_setup.htm&release=264.0.0&type=5 "Upload an HTTPS certificate that you own to Salesforce servers, then serve your custom domain with that certificate. After you set up your domain in Salesforce, that domain can serve your Experience Cloud sites or Salesforce Sites.")