Skip to content

Update DNS records for SSL changes

Last updated: April 12, 2024

Available with any of the following subscriptions, except where noted:

All products and plans

Effective July 31, 2023, HubSpot will be changing SSL certificate providers from DigiCert to Google Trust Services. To avoid site disruptions, modify your DNS records before this date.

If you don't have Domain settings permissions in HubSpot or access to your DNS provider, partner with your administrator or IT team to make these changes. 

Please note:
  • You only need to modify domains that rely on CNAME records. All other domains will be updated automatically.
  • If your domain uses punycodes, your SSL provider will be Let's Encrypt. 
  • If you are using CAA records and previously had 0 issue digicert.com in place, you can add 0 issue pki.goog or 0 issue letsencrypt.org to avoid SSL validation issues. 

  • In your HubSpot account, click the settings settings icon in the top navigation bar.
  • In the left sidebar menu, navigate to Content > Domains & URLs.
  • Next to the domain, click the Edit dropdown menu and select Show DNS records. Domains with DNS issue will show an Action required error. 

edit-domain-that-has-action-required

  • In the dialog box, copy the information in the Host and Required data columns. 

dns-records-with-errors

  • In a separate window, log into your DNS provider account, such as GoDaddy or Namecheap.
  • Edit your DNS records using the values you copied. 

If you do not change your DNS records before July 31, 2023, your original SSL record from Digicert will expire and cause browsers to flag your website as unsafe. Making changes before this date will prevent these issues. 

Was this article helpful?
This form is used for documentation feedback only. Learn how to get help with HubSpot.