Every hostname you redirect through redirect.pizza gets an SSL certificate, without any action on your side. Your redirects work over both http:// and https://, and visitors never see a certificate warning.
How it works
- You point the DNS of your hostname at redirect.pizza.
- As soon as we detect the DNS change, we request a certificate for the hostname. This usually takes a few minutes.
- We renew the certificate automatically before it expires, for as long as the hostname points at us.
Wildcard hostnames get a wildcard certificate through a DNS challenge. See Wildcard subdomains for the extra DNS record that requires.
Certificate authorities
We issue certificates through Let's Encrypt, with ZeroSSL as a fallback. When one of them is unavailable or rate limited, we switch to the other automatically, so a hiccup at a certificate authority doesn't affect your redirects.
If your domain uses CAA records, they must allow both authorities. See What DNS types can I use? for the exact records. On the Pro plan and up you can also opt in to short-lived certificates.
Security
We only support current TLS versions and keep the cipher configuration up to date. Our HTTPS redirects hold an A+ rating from Qualys SSL Labs, on every plan, including Free.

Want to go further? Enable HSTS to make browsers always use HTTPS for your hostnames.