To enable HTTPS for your custom domain, you need to add an SSL certificate from a certificate authority (CA). You can also use these steps to update a certificate that has expired. For more information, see Generating a CSR for a custom domain.
Note:
-
Do not use a self-signed certificate or a certificate signed by a CA that is internal to your own organization. Certificates must be signed by a globally trusted CA.
-
Use RSA-2048 encryption if possible. RSA-1024 is allowed, but not recommended. RSA-4096 is not supported.
-
The certificate must be valid.
-
You can use wildcard and SAN certificates, but they must match the domain name.