SSL Certificates in RemarkablePanel

Automatic SSL (Let’s Encrypt)

RemarkablePanel automatically provisions a Let’s Encrypt certificate when you create a website. The certificate covers the primary domain and renews automatically before expiry: you don’t need to do anything.

To verify SSL is active: open the website → SSL: you should see the certificate details, issuer (Let’s Encrypt), and expiry date.

Force HTTPS

By default the site is accessible over both HTTP and HTTPS. To redirect all HTTP to HTTPS:

1. Open the website → SSL
2. Enable Force HTTPS redirect
3. Save

This adds a 301 redirect from http:// to https:// for all requests.

Reissue a certificate

If the certificate fails to auto-renew (usually due to a DNS change):

1. Open the website → SSL → Reissue Certificate
2. Click Reissue

Let's Encrypt validates ownership by making an HTTP request to your domain. The domain's A record must be pointing at your server before a certificate can be issued or reissued.

Custom/purchased certificate

If you have a certificate from a commercial CA (DigiCert, Sectigo, etc.):

1. Open the website → SSL → Upload Certificate
2. Paste the private key
3. Paste the certificate (the one for your domain, not the CA bundle)
4. Paste the CA chain/bundle
5. Click Upload

The certificate activates immediately.

SSL for subdomains

Each subdomain gets its own certificate automatically when created. If a subdomain was created before DNS was set up, reissue its certificate after DNS propagates.

Wildcard certificates

RemarkablePanel does not currently support automatic wildcard certificate issuance. For wildcard coverage (*.yourdomain.com), purchase a wildcard certificate from a CA and upload it manually as described above.