SSL Certificates
Every VibeMint site — subdomain and custom domain alike — is automatically secured with an industry-standard TLS/SSL certificate. Zero configuration, zero cost, and auto-renewed before expiry.
Free for All Sites
SSL certificates are included at zero cost for every VibeMint project — subdomains and custom domains.
Auto-Renewed
Certificates renew automatically every 90 days via Let's Encrypt. No action required from your side.
Wildcard Coverage
Wildcard certificates cover your primary domain and all subpaths (e.g. /buy, /chart, /whitepaper).
HTTPS Enforced
All HTTP requests are automatically redirected to HTTPS. No mixed-content warnings on any VibeMint site.
TLS 1.3 Ready
VibeMint enforces TLS 1.3 as the default — the latest and most secure transport layer protocol.
Browser Trust Chain
Issued by Let's Encrypt — trusted natively by Chrome, Firefox, Safari, and all major mobile browsers.
Certificate Lifecycle
When you publish a project or verify a custom domain, VibeMint immediately requests a certificate from Let's Encrypt via the ACME protocol. Issuance typically completes within 30 seconds.
VibeMint handles the domain validation challenge internally using HTTP-01 or DNS-01 verification. You don't need to add any TXT records or make any additional changes.
Your certificate is active and serving all HTTPS traffic. The validity window is 90 days — well within Let's Encrypt's recommended renewal schedule.
VibeMint automatically triggers renewal 30 days before expiry. The renewal process is transparent — your site remains live without any interruption or downtime.
Security Specifications
| Specification | Value |
|---|---|
| Certificate Authority | Let's Encrypt (globally trusted) |
| Protocol | TLS 1.2 + TLS 1.3 |
| Key Size | ECDSA P-256 (2048-bit RSA fallback) |
| HSTS | Enabled — max-age 1 year, includeSubDomains |
| OCSP Stapling | Enabled for fast revocation checks |
| Certificate Validity | 90 days (auto-renewed at 60 days) |
| HTTP → HTTPS Redirect | Automatic 301 redirect enforced |
| Mixed Content | Blocked — all resources served over HTTPS |