Understand HTTPS and your domain’s certificate status

Carrot starts HTTPS certificate setup automatically when you connect a new custom domain. DNS pointing to your site and the certificate being ready are separate checks.

HTTPS encrypts the connection between a visitor’s browser and your site. An SSL certificate is what lets the browser establish that secure connection for your domain. For example, https://example.com needs a certificate covering example.com; a working www address alone doesn’t confirm the bare address is ready.

Read your domain’s status

You need access to administer the site to view its Domain settings.

1. Open Domain settings, choose your account, and check the site name. If it’s the wrong site, select the site name to choose another, then open Site Admin → Domain if needed.
2. Read the DNS and certificate states separately:
   • DNS not yet pointing to your site: Compare your provider’s saved records with the records for your site in Carrot. If a record needs changing, use your registrar’s instructions and the values your Domain page shows. Ask your DNS provider if you’re unsure which record to change.
   • DNS configured: Carrot has detected DNS pointing to the site. Still test the website addresses below.
   • Certificate pending: The HTTPS certificate isn’t ready yet. This can appear even when DNS is configured.
   • Certificate issued: The certificate is ready; test your website in the browser.
3. Select Refresh status to check again, or Check again if automatic checks have stopped.
4. Add both records your Domain page shows, then open both example.com and www.example.com to check they reach your site. Use your own domain and test both addresses using HTTPS without a security warning.

Once the Domain page shows the records are correct, allow up to 24 hours for DNS and HTTPS setup. If the certificate is still pending or either address shows a security warning after that, use the help drawer’s Support tab or start a chat. Include the failing address and the status or warning you see.

If HTTPS is disabled on an older connection

An older domain connection may show HTTPS disabled and an Enable HTTPS button on the Domain page.

1. Select Enable HTTPS if that control is shown.
2. Check the status again. Certificate pending means setup is still in progress; Certificate issued means the certificate is ready.
3. Test both HTTPS addresses in your browser and follow the timing guidance above. If Enable HTTPS itself fails, use the help drawer’s Support tab and include the message shown.

New connections don’t need this extra enable step. There isn’t a control to turn HTTPS off.