Parked domain security
How parked domains work with and without SSL
A standard UKC parked domain can display its parking, forwarding or single-page website content over ordinary HTTP. Parked Domain SSL is a separate service that adds a trusted certificate and redirects visitors to HTTPS. If the SSL service is not active, opening the parked domain with https:// may produce a browser certificate warning.
Which parked-domain setup do you have?
Parked domain without Parked Domain SSL
Your domain can show UKC parking content, use web forwarding or publish its included single-page website over HTTP. The platform does not force visitors to HTTPS because no trusted parked-domain certificate has been installed.
What this means: http://yourdomain can work normally, while manually entering https://yourdomain may show a certificate warning.
Parked domain with Parked Domain SSL
The separate Parked Domain SSL service installs a trusted certificate for the root domain and its www address. Ordinary HTTP visits are then redirected to the secure root-domain address.
What this means: visitors can use HTTP or HTTPS and should arrive at the securely served parked-domain content without a certificate warning.
What should each address do?
The expected result depends on whether the separate Parked Domain SSL service is active and fully provisioned.
| Address opened | Without Parked Domain SSL | With Parked Domain SSL |
|---|---|---|
http://yourdomain | The parked-domain content can open over HTTP. It is not forced to HTTPS. | Redirects to the secure root-domain address. |
http://www.yourdomain | The parked-domain content can open over HTTP. It is not forced to HTTPS. | Redirects to the secure root-domain address without www. |
https://yourdomain | Trusted HTTPS is not provided. A certificate warning may appear. | Opens the parked-domain content with a valid trusted certificate. |
https://www.yourdomain | Trusted HTTPS is not provided. A certificate warning may appear. | Connects securely because the certificate covers both versions of the name. |
Why might a browser still show a warning?
The SSL service is not active
A normal parked domain does not include trusted HTTPS automatically. Check the service shown in your Client Area before assuming the parking page is broken.
Setup is still completing
Once the required DNS is visible, Parked Domain SSL normally provisions in approximately three minutes. Test again in a fresh private window after this period.
The domain points somewhere else
Parked Domain SSL protects content delivered by the UKC parking platform. If the domain or www address points to another provider, that provider must supply the appropriate certificate.
The page loads an insecure resource
If the certificate is valid but the browser still says Not secure, an image, script, stylesheet or frame may be loading over HTTP. UKC Support can help identify whether this is a content issue.
What should you check before contacting Support?
- 1Confirm the service
Open your Client Area and check whether Parked Domain SSL is active for the exact affected domain. Website-hosting SSL is a different service.
- 2Test all four addresses
Try HTTP and HTTPS with and without
www. Note which address works and copy the exact browser warning without including private account information. - 3Allow normal setup time
If the SSL service has just been activated or DNS was recently changed, allow the normal provisioning and DNS update period before making further changes.
- 4Retest in a private window
A private window helps separate the current public result from an older page or warning retained by the browser.
For broader parking problems, including an old website, another provider’s page or a DNS error, use the parked-domain troubleshooting guide. For general browser messages, see what browser security warnings mean.
Parked Domain SSL questions
Is Parked Domain SSL included with every parked domain?
No. Standard parking can work over HTTP. Parked Domain SSL is a separate service for customers who want trusted HTTPS on content delivered by the UKC parking platform.
Is an HTTP parked page broken or unsafe?
Not necessarily. HTTP is the expected web route for standard parking without the SSL service. Do not enter sensitive information on an unencrypted page, and add Parked Domain SSL when trusted HTTPS is required.
Should a domain without Parked Domain SSL redirect to HTTPS?
No. It deliberately remains on HTTP. Redirecting it to HTTPS without a matching certificate could send visitors into a browser warning.
How long does Parked Domain SSL take to activate?
After the required UKC parking DNS is publicly visible, normal certificate provisioning should complete in approximately three minutes. Recent DNS changes may take additional time to become visible across different networks.
Does it cover both the root domain and www?
Yes. The managed certificate is intended to cover both versions. HTTP visits to either version are redirected to the secure root-domain address once provisioning is complete.
Does Parked Domain SSL protect a website hosted elsewhere?
No. It covers services delivered by the UKC parking platform. A website hosted by another provider needs a certificate configured by that hosting or website service.
Does Parked Domain SSL affect email?
No. Parked Domain SSL protects web-browser connections to the parked domain. Email delivery and mailbox security use separate DNS records and service settings.
What should I send to UKC Support?
Send the affected domain through the secure helpdesk, the exact warning, whether it affects the root name, www or both, when the SSL service was activated, and details of any recent DNS change. Never send a password.
Want trusted HTTPS?
Add SSL to a domain using UKC parking
Order Parked Domain SSL for secure parking, forwarding or single-page website content delivered through the UKC parking platform.