SSL / TLS

Domain and Wildcard Certificates in One Panel.

Manage certificates for domain names and wildcard names from the same list, with one renewal process. Each certificate type does not need its own tool.

All plans, including Free Certificate management is included in Free.

Start Free Read the SSL docs

How a certificate is issued

You add the domain or wildcard name in the panel and choose a validation method.
Your node sends the request to the host.mw certificate service, which orders the certificate from the certificate authority ZeroSSL. The certificate is not issued by an ACME client on your server.
When the certificate is issued, Nodekeeper installs it, updates the sites and reverse proxies that use it, and reloads nginx.

Validation methods

Method	How it works	Wildcard
HTTP / HTTPS file	The CA fetches a check file from the domain, and Nodekeeper serves it.	No
Email	The CA sends a confirmation link to the domain's admin mailbox.	No
DNS (CNAME)	A CNAME record is added for the domain. The record changes with every order.	Yes (required)

Screenshot pending — HS-SSL-1 Certificate list: domain and wildcard entries, expiry and renewal state A real, redacted screen from a test environment will be placed here

Wildcard certificates and automatic renewal

A wildcard name such as *.example.com is validated through DNS. Because the validation record changes for every order, automatic renewal needs a way to write that record automatically:

a DNS provider script: Cloudflare, DNSPod, Namecheap or PowerDNS; All plans, including Free
the built-in DNS, when the zone is hosted on Nodekeeper's authoritative DNS; From Business
otherwise, you add the new CNAME record by hand at each renewal. Nodekeeper shows the record to add and alerts you.

Renewal, retries and alerts

Renewal starts 30 days before expiry. The window is adjustable.
If a renewal fails, the current certificate stays in use. Nodekeeper retries with increasing delays, and the panel shows the failure count, the reason and the next attempt.
Administrators and the certificate's owner get an email when a certificate is close to expiry after failed attempts, or when renewal needs manual action.
The certificate service accepts at most 20 orders per domain in any 30 days. The retry schedule stays well below that limit.

Limits and prerequisites

Issuing and renewal depend on the host.mw certificate service being reachable and configured in your panel.
Certificate validity periods follow the certificate authority's current rules. Check the panel for each certificate's expiry date.
Renewal retries and alerts as described here are in the November 2026 release. Older installations should update.

N Nodekeeper

All-in-one Linux server management agent.

Product

Features Pricing Docs

Company

About Contact 中文

Support

[email protected] WhatsApp: +817093066006