Knowledge Base

Marketing Cloud

Automatic Provisioning of SSL Certificate for Link Tracking Domains

SSL Certificates ensure secure connections and are absolutely necessary for your link tracking domain. Maropost now procures the SSL certificates automatically for the link tracking domains to be used for email campaigns. The SSL certificates are also automatically renewed a few days prior to expiry. This feature is intended to automate the creation and management of your SSL certificates for the link tracking domain so you have one thing less to do.

Important!
The link tracking domain used in Brand is different and the process for requesting it is still the same. That is, you must contact our Deliverability team at postmaster@maropost.com and they will provision the SSL certificate for the link tracking domain to be used for the Brand.

Adding Link Tracking Domain in the Account

To use the feature, you simply need to add your link tracking domain to your account and the provisioning and renewal of the SSL certificate for the domain is done by Maropost.

Here's how you add a link tracking domain in your account:

Click your user name on the top-right corner of the application and from the drop-down menu, select Account Details.
On the Account Details page, select the ACCOUNT tab.
In the Account Information section, enter your domain in the Link tracking domain field.
Note: Make sure that you have already added the CNAME for your link tracking domain to the DNS settings.
Click SAVE CHANGES.

Upon saving, an SSL certificate is automatically provisioned within 5-10 minutes.

Important!

If Your DNS is Restricting Certificate Authorities
You must check with your IT department and ask if they have created any Certification Authority Authorization (CAA) records. The use of these types of records is to restrict which certificate authorities (CAs) are allowed to issue certificates for a domain.

If you are using CAA records to restrict certificate authorities for your link tracking domain, then you must add a CAA record to allow Maropost to automatically issue secure certificates for that domain.

For example, suppose your link tracking domain is links.example.com and you're using CAA records. You'll then need to create a CAA record that names letsencrypt.org as a certificate authority.