Browse by Topic

Free SSL Certificate (Encryption Everywhere)

BigCommerce offers a free SSL certificate, Encryption Everywhere, for stores on any plan. This allows any store with a custom domain name instant access to a free, dedicated SSL certificate.

Another benefit of having a dedicated SSL on your store is the ability to use our Sitewide HTTPS feature, which will encrypt all pages of the website. Having sitewide HTTPS will display a green padlock on all pages, giving shoppers extra confidence in your brand and it may improve your SEO ranking in Google.

Available SSL options with Encryption Everywhere highlighted

 
 

Requirements

  • Your store must have a custom domain. The domain name can be pointed via A record, CNAME record, or by nameservers. We recommend using nameservers if at all possible.
  • Ensure your BigCommerce account information is up to date, such as Country, State, and Organization Name.
  • Your domain name, organization name, or address must not contain a Symantec protected keyword (e.g. Ford, Amazon, Apple).
  • Your store's WWW/No WWW Redirect is set to Redirect WWW to no WWW. This setting can be updated to match your preferences, once the SSL certificate is successfully installed.
 

Using CNAME or A record to point your domain? You will need to add a CNAME for the WWW version of your domain name in order to use an Encryption Everywhere SSL. If this is not possible, you may need to purchase one of our other SSL certificates.

If you are unsure about meeting these requirements, feel free to reach out to our support team for further investigation.

 
 

Applying the Free SSL Certificate

If you have met the requirements, the free SSL certificate will apply automatically after the store has a custom domain applied. No further action is required. Note that the new SSL certificate may take some time to propagate. It can take up to 48 hours before it is fully applied.

The free SSL certificate can be enabled manually in the event it does not automatically apply. Note that when manually installing the Encryption Everywhere SSL, you will need to select an approver email from the drop-down menu. However, you will not need to approve the installation or receive an approver email. See BigCommerce SSL Certificate to learn more.

 
 

FAQ

How do I renew Encryption Everywhere?

No action is required. BigCommerce automatically installs a free SSL certificate once the previous SSL has expired.

What happens if my current paid SSL certificate expires? 

If you have purchased an SSL certificate and it expires, BigCommerce will automatically install an Encryption Everywhere certificate, so the store is always protected. If the SSL has not applied after 48 hours, please reach out to our support team for further investigation.

What happened to the shared SSL certificate?

The shared SSL certificate will continue to protect stores without a custom domain, using the .mybigcommerce.com subdomain.

Stores with a custom domain applied before May 24, 2017, but without a dedicated SSL certificate will continue to use the shared SSL certificate. These stores can opt in to the free SSL certificate at any time. Once a store has applied Encryption Everywhere, it cannot go back to using the shared SSL certificate with that custom domain.

What's the difference between the free and paid certificates?

The Quick SSL Premium, True BusinessID, and True BusinessID with EV SSL certificates offer features that the free option does not. They include things like:

  • a site seal
  • purchase protection / warranty
  • extended validation (EV)

Why don't I see a padlock on X page?

If you've customized your theme with "hardcoded" references to insecure assets (such as images using an HTTP protocol instead of HTTPS), this can cause "mixed security" warnings and prevent the page from showing as fully secure. See Browser Security Warnings for more information.

Was this article helpful?