Toggle Navigation Toggle Navigation
  • Lumen Connect overview
  • Getting started/General
  • Services
  • APIs
  • Monitoring & Reports
  • Billing
  • Admin
  • Support
  • Orders (Wholesale)
  • Other portals overview
  • Media portal
  • DDoS Mitigation & Reporting
  • Security Solutions portal
  • VoIP portal
  • View all product support
  • Infrastructure
  • Connectivity
  • Security
  • Communication
  • Media & Entertainment
  • LSR portal
  • Port Out Request tool
  • Virtual Front Office
  • Readiness overview
  • Product-specific readiness
  • Handbooks
  • All infrastructure services
  • Edge Bare Metal
  • Edge Gateway
  • Edge Private Cloud
  • Encrypted Wavelength Service
  • Network Storage
  • All connectivity services
  • Ethernet On-Demand
  • Fiber+ Internet
  • Internet On-Demand
  • IP VPN On-Demand
  • NaaS Port
  • On-Demand services
  • Troubleshooting tools
  • All security services
  • Adaptive Network Security
  • Adaptive Threat Intelligence
  • Application Delivery Solutions
  • DDoS Hyper
  • DDoS Mitigation Service
  • Lumen Defender Powered by Black Lotus Labs
  • Lumen SASE with Fortinet
  • Lumen SASE with Versa
  • Lumen SASE with VMware
  • Network-based Security
  • SD-WAN with Cisco Meraki
  • SD-WAN with Versa Networks
  • Security Log Monitoring
  • All communication services
  • Cloud Voice
  • Hosted VoIP
  • Local Inbound (LI)
  • Lumen Solutions for Microsoft Teams
  • Lumen Solutions for Webex
  • Lumen Solutions for Zoom
  • Lumen Solutions for Zoom for Government
  • SIP Trunking
  • Unified Communications and Collaboration
  • Voice Complete
  • VoIP Enhanced Local (ELS)
  • VoIP services
  • Vyvx® Broadcast Solutions
  • North America
  • Asia Pacific (APAC)
  • Contact us APIs

Creating a Let's Encrypt certificate before your DNS change

If you would like to create your free TLS certificates before you make your DNS change, you need to configure your server.

Nginx users

  1. Obtain the CNAME record for your application. You’ll see this on the DNS menu in the Lumen management console.
  1. Add this block to your server’s configuration, replacing yourdomain.c.section.io with the CNAME you obtained above:
                location /.well-known/acme-challenge/ {
  proxy_set_header Host $host;
  proxy_pass http://yourdomain.c.section.io;
}
  1. In the Lumen management console, click then HTTPS menu, then click Renew Certificate.

Apache users

  1. Obtain the CNAME record for your application. You’ll see this on the DNS menu in the Lumen management console.
  1. Add this block to your server’s configuration, replacing yourdomain.c.section.io with the CNAME you obtained above:
                <Location "/.well-known/acme-challenge/">
ProxyPreserveHost On
ProxyPass "http://yourdomain.c.section.io"
</Location>
`
  1. In the Lumen management console, click then HTTPS menu, then click Renew Certificate.

Determine TLS certificate order