Skip to main content

​
KeylessSSL

​
What does this do for me?

KeylessSSL manages delegated domain control validation and requests certificates through Cloudflare for SaaS Custom Hostnames. You add the DNS records shown for a domain, verify control, and request a certificate without giving KeylessSSL’s portal your DNS-provider credentials. The authenticated portal contains screens for domains, certificates, API keys, webhooks, audit events, usage, and organization settings.

Use KeylessSSL

Add a domain, publish its DNS records, verify it, and monitor its certificate.

Integrate the API

Review the service architecture, authentication model, and implemented HTTP routes.

Work as a partner

See the collaboration model that is verified in the application.

​
Verified workflow

  1. Sign in through the portal’s Auth0 flow.
  2. Add a base domain.
  3. Publish the tenant-specific ownership TXT record and the delegated-validation CNAME shown by the portal.
  4. Ask KeylessSSL to verify the DNS records.
  5. Open the verified domain and request certificate issuance.
  6. Monitor provider status from the Domains and Certificates screens.
KeylessSSL treats the ownership TXT record as proof that the current organization controls the domain. The delegation CNAME is separately required for certificate issuance.