How exactly would you use the free App Service Managed Certificate in Azure to properly secure your domain?

I actually did get it to work for the most part by following the instructions at https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain But, in the end, the app is not 100% secure as it will come up with unsecure browser warnings - basically making the free certificate useless.

It says that it does not support 'naked' domains, which I'm assuming is 'yourdomain.com', versus 'www.yourdomain.com', but again, there is no point to the free certificate then. Can I actually get my site 100% secure without purchasing an ssl certificate?

I already have an SSL cert, but don't want to use it in this case. I've followed the examples on redirecting naked domain to www, but that doesn't seem to work either. When you type in 'www.yourdomain.com' it gets redirected to https://yourdomain.com in the browser, then displays my web app properly. So, if you add a redirect from yourdomain.com to www.yourdomain.com shouldn't that end up in an endless redirect?

Either way, I've read all the documentation from microsoft, and can't quite get the web app secured. Any advice on this?

  • hows about letsencrypt? – djdomi Dec 18 '19 at 21:42
  • There is no documentation on that for azure, LOL – Chris J Dec 18 '19 at 23:42
  • Again, what's the point of the free App Service Managed cert? – Chris J Dec 18 '19 at 23:45
  • Figured it out! – Chris J Dec 28 '19 at 3:11
  • 1
    what did you figured out about? – djdomi Dec 28 '19 at 14:50

The lack of support for apex domains is a fairy glaring omission from free certs and I hope this gets added in the future. That said, that’s a known issue with the current preview, so if you need a cert for your apex domain then this probably isn’t for you.

Free certs work just fine for subdomains, so there will be plenty of scenarios where they will be useful, just not your current scenario. It’s a preview and it has specific limitations to work with. If those limitations don’t work for you then it’s not the solution for you.

If you want to redirect your apex domain to www the you would need to remove the redirect going the other way to avoid a loop.


I found this article here on using Let's Encrypt instead.

Excellent article on Free SSL on azure:


  • Downvote for an actual solution to the answer? Sure, OK – Chris J Jan 14 '20 at 6:12
  • 1
    So it looks like you installed a Let's Encrypt software package right on the VM and registered the root domain using that method, correct? I think the downvote is because you're self-promoting the blog post. – Corgalore Jul 20 '20 at 14:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.