Welcome
To join our community, please login or register!
Login Register
Welcome to the Spooky Services Hub!
Spooky Services provides a variety of internet services for free for everyone to use. This hub acts as the announcements channel, forums, user feedback and suggestions portal for Spooky Services!
Internet Explorer
Internet Explorer is not supported. Please upgrade to a more modern browser.
  1. Home
  2. Spookhost
  3. Spookhost Announcements
  4. 🔒 Stable ACME SSL/TLS providers support

🔒 Stable ACME SSL/TLS providers support
Started by SpookyKipper

Share
SpookyKipper
Joined
14 May 2023
Last Seen
10 Aug 2026
Topics
21
Posts
32
Discord
spookykipper
Google
Spooky Kipper
21 days ago • Last edited: 21 days ago
Hello everyone,
 
With Client Portal v3.5, we now supports issuing TLS certificates from ZeroSSL, Let's Encrypt, and Google Trust Services with key algorithms of EC 256, EC 384, and RSA 2048. In a good environment, the full certificate request process can be done in within 1 minute and 30 seconds (from requesting the certificate, to adding the required CNAME and getting the actual certificate) using our nameservers.
 

❗Important points to note:

  • ZeroSSL EC 256 is the default configuration, you may change this via advanced options when requesting the certificate. We recommend EC 256 for balanced performance and security.
  • ZeroSSL does not support RSA 2048 using our TLS Tool
  • Your private keys stored in our Client Portal is encrypted with password and salt with Argon2id for key derivation, and then securely encrypted with AES-256-GCM.
  • Free subdomains do not need to request a certificate as it is automatically covered.

❓ How to request for a certificate

  1. Head to the Client Portal TLS section, input your domain and request it.
  2. Add the required CNAME in the Control Panel, or your respective DNS provider.
  3. Click on the Validate TLS button.
  4. Copy and paste the Private Key followed by the Certificate in the Control Panel.
Our client portal will provide "multiple" certificates, please copy ALL of them in order in to the control panel. You may simply Ctrl+A to copy the whole string, the order is already properly formatted if you use our tool.
 

▶️ Using other Certificate Authorities

You are not limited to using our TLS Tool with those 3 CAs. If you have a certificate purchased elsewhere, you may input the private key and certificate provided by your CA into our control panel.
 
Do note that:
  • RSA keys are only supported up to 2048 bits, if you need higher security, consider EC keys.
  • We highly recommend the use of certificate chains as it ensures browser compatibility especially with new Root CAs recently. To add a certificate chain, simply put them AFTER your website's end entity certificate. We do not recommend including the Root CA. 
    ---BEGIN CERT--- // your website's end entity cert
---END CERT---
---BEGIN CERT--- // intermediate CAs
---END CERT---
... and more intermediate CAs

🔐 Security of our server's TLS setup

Spookhost Free webservers are configured to only support TLS 1.2 and TLS 1.3 along with Post-Quantum Cryptography support. If your TLS certificate is correctly installed, you will get a score of A in Qualys SSL Labs. (See https://www.ssllabs.com/ssltest/analyze.html?d=demo.shpage.top&hideResults=on)
 
 
Happy Hosting and thank you for your continuous support.
:Spookhost~1: Spookhost - https://spookhost.xyz/
Share