Documentation
Guides for people and AI
Step by step: what to do, where to click and what to paste. Any page can go to your AI assistant, and the SSL auto-renewal guides have a ready prompt: the AI walks you through.
Domains
Registration, transfer to ZRAZU, renewal, the owner and contacts, transfer away.
- How to register a domainFind a free name, add it to the cart, choose the owner, accept the registry documents and pay. A domain usually becomes yours in under a minute.
- Transferring a domain to ZRAZUHow to move a domain from another registrar: check, transfer code, DNS choice, payment and timing. What to do if the code was rejected.
- Renewing a domain and auto-renewHow to renew a domain by hand, turn on auto-renew from your balance, which reminders we send and how to let a domain go on purpose.
- Domain owner and contactsHow to create a contact, assign the owner and change it: a 72-hour pause, the new owner's consent within 14 days, and what WHOIS shows.
- Transferring a domain away from ZRAZUHow to get a transfer code to move a domain to another registrar: remove the lock, request the code in the cabinet and why it arrives only by email.
- Bulk actions on domainsHow to change auto-renew, reminders, the transfer lock or name servers for many domains at once, stop a batch and roll the changes back.
DNS
DNS zones on ZRAZU servers, records, external DNS and Cloudflare, DNSSEC, forwarding.
- DNS zone on ZRAZU servers — how to turn it onFree DNS on ZRAZU servers: which name servers to use, how to turn the zone on for a domain, edit records, undo a change and restore an earlier revision.
- DNS records for a site and mail — examplesWhich records to add for a website (A, AAAA, CNAME) and mail (MX, SPF, DKIM, DMARC) in a ZRAZU DNS zone, with ready examples and a note on every field.
- A domain at another registrar, and CloudflareHow to run a DNS zone on ZRAZU servers for a domain at another registrar, set your own name servers and connect Cloudflare with an API key in the cabinet.
- DNSSEC for a domain on ZRAZU serversHow to turn DNSSEC on and off for a domain on ZRAZU DNS: what zone signing is, where to get the DS record and what to do with a DS left by a previous provider.
- Forward a domain to another addressHow to set up domain forwarding on ZRAZU: the root and www open the address you give, with code 301 or 302, keeping the path and parameters or not.
SSL certificates
Ordering and activation, domain validation, files and installation, reissue, ACME.
- SSL certificate types at ZRAZUDV, Wildcard, Multi-domain, OV and EV: how the certificates differ, when the free one is enough, and how the 1-year subscription renews in parts.
- Ordering and activating a certificateHow to order a paid SSL in the cabinet: domain, CSR with your own key, extra names, payment in any way. How to activate after paying.
- Domain validation for a certificateHow to prove the domain is yours: a DNS record, a file on the site or an email. Automatic record for domains on ZRAZU DNS and in Cloudflare, common errors.
- Certificate files and server installationWhich files ZRAZU gives after issuance: fullchain, cert, chain. How to build a PFX for IIS and Windows and where to put them. The private key stays with you.
- Reissuing and revoking a certificateWhen to reissue a certificate with a new CSR, what happens to the term and payment, how to revoke a certificate if the key leaked, and about refunds.
- ACME for certbot, acme.sh and CaddyHow a server issues and renews a certificate on its own: the ZRAZU ACME server for paid certificates and acme-dns for free ones, wildcard included.
SSL: automatic renewal
The certificate updates on your site by itself: your own server, a hosting panel, the cloud. Step-by-step guides and AI prompts.
- How automatic certificate renewal worksHow a ZRAZU SSL certificate renews on your site by itself: a personal certificate link, a scheduled task on your side and the guide for your hosting.
- Linux server — nginx, Apache, Caddy, HAProxy, DockerA script for nginx, Apache, Caddy, HAProxy and Docker fetches the fresh certificate daily, checks it against your key and reloads the server with no downtime.Renews by itself
- Windows Server and IISA Windows Task Scheduler task fetches the fresh certificate once a day, links it to the key in the Windows store and binds it to the IIS site.Renews by itself
- Kubernetes — the certificate in a TLS secret renews by itselfA CronJob fetches the fresh certificate once a day and updates the TLS secret your ingress uses; the key stays in that same secret.Renews by itself
- Hosting with cPanel — the certificate renews by itselfA cron job in cPanel fetches the fresh certificate once a day and installs it on your site with cPanel's built-in tool. No SSH needed.Renews by itself
- Hosting panels without automation — renew by handadm.tools, Cityhost, Mirohost, ISPmanager, Plesk, DirectAdmin, Hostinger, Hetzner: where in the panel to replace the certificate and what to paste.By hand, we email a reminder
- AWS — load balancer, CloudFront, API GatewayA Lambda function fetches the fresh certificate daily and reimports it into AWS Certificate Manager under the same ARN — ELB and CloudFront follow.Renews by itself
- Azure — Application Gateway, App Service, Front DoorAn Azure Automation runbook fetches the fresh certificate once a day and adds a new version to Key Vault, and Azure services pick it up on their own.Renews by itself
- Google Cloud — load balancer with Certificate ManagerA Cloud Run job started by Cloud Scheduler once a day updates the certificate in Certificate Manager in place, and the load balancer picks it up on its own.Renews by itself
- Cloudflare in front of your siteSite behind Cloudflare: on Free and Pro our certificate sits on your server; on Business and Enterprise a script renews it in Cloudflare via the API.Renews by itself
- Site builders — Tilda, Wix, Shopify, Prom, Horoshop and othersTilda, Wix, Shopify, Prom, Horoshop and other site builders issue a free certificate themselves and don't accept another one — no need to buy SSL.Our certificate isn’t needed
- Certificate link — developer referenceAddresses, formats, response codes, conditional requests, limits and security rules of the personal certificate link — for your own integrations and AI agents.
Monitoring
Checks of the site, domain and certificate, alerts and incidents.
- What ZRAZU monitoring checksMonitoring watches your domain, delegation, DNSSEC, certificate, mail and website, and writes to you only when something is really broken.
- Add domains to monitoring and the planHow to put domains from other registrars on monitoring with a list, a CSV file or Cloudflare, and how the free and paid monitoring plans work.
- Monitoring notifications and incidentsWhere domain alerts go, how to connect email, Telegram or a webhook, set quiet hours, and what to do when an incident is opened.
Account and payment
Organization and team, sign-in and security, balance, payment methods, invoices and documents, support.
- Getting started: sign-up, sign-in, organizationHow to create a ZRAZU account, sign in with a password, an email link or a passkey, create an organization and switch between organizations in the dashboard.
- Team and roles in an organizationHow to invite a colleague to your organization, which role to give, what each role can do, how to change a role or remove a person and where the sign-in log is.
- Sign-in security: passkey, code, sessionsHow to protect a ZRAZU account: add a passkey or an app code, save backup codes, change the password and email, close other sessions and recover access.
- Balance and payment: card and IBAN invoiceHow to top up your ZRAZU balance by card or by an IBAN invoice, save a card, pay for an order, and what to do if a payment didn't go through.
- Invoices, acts and payersHow to add a payer so invoices and acts are issued to a company or sole proprietor, where to find and download them and how to export the money history as CSV.
- Contacting support from the dashboardHow to write to ZRAZU support from the dashboard, email or Telegram, what to include in a request, how to follow the reply and what support never does.
API and MCP
API keys, permissions and limits, requests and errors, connecting AI agents via MCP.
- ZRAZU API — developer overviewBase address, key sign-in, idempotency, error format and limits of the ZRAZU API — for your own scripts, integrations and AI agents.
- API keys — how to create and restrictHow to create an API key in the ZRAZU cabinet, choose its rights, domains, IP addresses and term, and revoke the key if it ends up in the wrong hands.
- Domains and DNS through the API — examplesExamples of ZRAZU API requests: list domains, monitoring, read a DNS zone, change records, create a zone and check delegation.
- MCP for AI agents — domain passportHow to connect the ZRAZU MCP server to Claude, ChatGPT or Cursor: the address, the domain passport tool, limits and what the agent never sees.
Resellers and studios
The partner program, reseller prices, manual mode, the WHMCS module, the studio cabinet.
- How to become a ZRAZU resellerHow to sell .UA domains and SSL from your own billing at wholesale prices: the form in the cabinet, the contract, the sandbox and the live login.
- EPP connection in the reseller cabinetHow a reseller creates a sandbox login, sets a password, adds IP addresses and a certificate, confirms mass actions and revokes access in the ZRAZU cabinet.
- Reseller price list in the cabinetWhere a reseller sees wholesale domain and SSL prices next to storefront retail prices, what currency they are in, how to read the table and why it is current.
- ZRAZU modules for WHMCSHow a reseller installs the "ZRAZU Domains" and "ZRAZU SSL" modules in WHMCS: download the archive, test in the sandbox and issue a key for live mode.
- Web studio cabinetHow a web studio manages clients' domains in one ZRAZU cabinet: joining, a tier by domain count, clients, prices, a monthly statement and transfers.
For AI agents
All documentation in a format for language models: the contents and links are in llms.txt, every page in one file is in llms-full.txt. Each page is also in Markdown.