# ZRAZU > ZRAZU is a Ukrainian domain and SSL registrar: .UA and international domains, DNS, SSL with automatic renewal, a customer cabinet. Below is documentation for people and AI agents; every page is also available as Markdown. ## Domains - [How to register a domain](https://zrazu.com/en/docs/domains-register.md): Find a free name, add it to the cart, choose the owner, accept the registry documents and pay. A domain usually becomes yours in under a minute. - [Transferring a domain to ZRAZU](https://zrazu.com/en/docs/domains-transfer-in.md): How to move a domain from another registrar: check, transfer code, DNS choice, payment and timing. What to do if the code was rejected. - [Renewing a domain and auto-renew](https://zrazu.com/en/docs/domains-renew.md): How to renew a domain by hand, turn on auto-renew from your balance, which reminders we send and how to let a domain go on purpose. - [Domain owner and contacts](https://zrazu.com/en/docs/domains-owner-contacts.md): How to create a contact, assign the owner and change it: a 72-hour pause, the new owner's consent within 14 days, and what WHOIS shows. - [Transferring a domain away from ZRAZU](https://zrazu.com/en/docs/domains-transfer-out.md): How to get a transfer code to move a domain to another registrar: remove the lock, request the code in the cabinet and why it arrives only by email. - [Bulk actions on domains](https://zrazu.com/en/docs/domains-bulk.md): How to change auto-renew, reminders, the transfer lock or name servers for many domains at once, stop a batch and roll the changes back. ## DNS - [DNS zone on ZRAZU servers — how to turn it on](https://zrazu.com/en/docs/dns-zone.md): Free DNS on ZRAZU servers: which name servers to use, how to turn the zone on for a domain, edit records, undo a change and restore an earlier revision. - [DNS records for a site and mail — examples](https://zrazu.com/en/docs/dns-records.md): Which records to add for a website (A, AAAA, CNAME) and mail (MX, SPF, DKIM, DMARC) in a ZRAZU DNS zone, with ready examples and a note on every field. - [A domain at another registrar, and Cloudflare](https://zrazu.com/en/docs/dns-external.md): How to run a DNS zone on ZRAZU servers for a domain at another registrar, set your own name servers and connect Cloudflare with an API key in the cabinet. - [DNSSEC for a domain on ZRAZU servers](https://zrazu.com/en/docs/dns-dnssec.md): How to turn DNSSEC on and off for a domain on ZRAZU DNS: what zone signing is, where to get the DS record and what to do with a DS left by a previous provider. - [Forward a domain to another address](https://zrazu.com/en/docs/dns-forward.md): How to set up domain forwarding on ZRAZU: the root and www open the address you give, with code 301 or 302, keeping the path and parameters or not. ## SSL certificates - [SSL certificate types at ZRAZU](https://zrazu.com/en/docs/ssl-overview.md): DV, Wildcard, Multi-domain, OV and EV: how the certificates differ, when the free one is enough, and how the 1-year subscription renews in parts. - [Ordering and activating a certificate](https://zrazu.com/en/docs/ssl-order.md): How to order a paid SSL in the cabinet: domain, CSR with your own key, extra names, payment in any way. How to activate after paying. - [Domain validation for a certificate](https://zrazu.com/en/docs/ssl-dcv.md): How to prove the domain is yours: a DNS record, a file on the site or an email. Automatic record for domains on ZRAZU DNS and in Cloudflare, common errors. - [Certificate files and server installation](https://zrazu.com/en/docs/ssl-files.md): Which files ZRAZU gives after issuance: fullchain, cert, chain. How to build a PFX for IIS and Windows and where to put them. The private key stays with you. - [Reissuing and revoking a certificate](https://zrazu.com/en/docs/ssl-reissue.md): When to reissue a certificate with a new CSR, what happens to the term and payment, how to revoke a certificate if the key leaked, and about refunds. - [ACME for certbot, acme.sh and Caddy](https://zrazu.com/en/docs/ssl-acme.md): How a server issues and renews a certificate on its own: the ZRAZU ACME server for paid certificates and acme-dns for free ones, wildcard included. ## SSL: automatic renewal - [How automatic certificate renewal works](https://zrazu.com/en/docs/ssl-auto.md): How a ZRAZU SSL certificate renews on your site by itself: a personal certificate link, a scheduled task on your side and the guide for your hosting. - [Linux server — nginx, Apache, Caddy, HAProxy, Docker](https://zrazu.com/en/docs/ssl-auto-linux.md): A script for nginx, Apache, Caddy, HAProxy and Docker fetches the fresh certificate daily, checks it against your key and reloads the server with no downtime. - [Windows Server and IIS](https://zrazu.com/en/docs/ssl-auto-windows-iis.md): A Windows Task Scheduler task fetches the fresh certificate once a day, links it to the key in the Windows store and binds it to the IIS site. - [Kubernetes — the certificate in a TLS secret renews by itself](https://zrazu.com/en/docs/ssl-auto-kubernetes.md): A CronJob fetches the fresh certificate once a day and updates the TLS secret your ingress uses; the key stays in that same secret. - [Hosting with cPanel — the certificate renews by itself](https://zrazu.com/en/docs/ssl-auto-cpanel.md): A cron job in cPanel fetches the fresh certificate once a day and installs it on your site with cPanel's built-in tool. No SSH needed. - [Hosting panels without automation — renew by hand](https://zrazu.com/en/docs/ssl-auto-panels-manual.md): adm.tools, Cityhost, Mirohost, ISPmanager, Plesk, DirectAdmin, Hostinger, Hetzner: where in the panel to replace the certificate and what to paste. - [AWS — load balancer, CloudFront, API Gateway](https://zrazu.com/en/docs/ssl-auto-aws.md): A Lambda function fetches the fresh certificate daily and reimports it into AWS Certificate Manager under the same ARN — ELB and CloudFront follow. - [Azure — Application Gateway, App Service, Front Door](https://zrazu.com/en/docs/ssl-auto-azure.md): An Azure Automation runbook fetches the fresh certificate once a day and adds a new version to Key Vault, and Azure services pick it up on their own. - [Google Cloud — load balancer with Certificate Manager](https://zrazu.com/en/docs/ssl-auto-gcp.md): A Cloud Run job started by Cloud Scheduler once a day updates the certificate in Certificate Manager in place, and the load balancer picks it up on its own. - [Cloudflare in front of your site](https://zrazu.com/en/docs/ssl-auto-cloudflare.md): Site behind Cloudflare: on Free and Pro our certificate sits on your server; on Business and Enterprise a script renews it in Cloudflare via the API. - [Site builders — Tilda, Wix, Shopify, Prom, Horoshop and others](https://zrazu.com/en/docs/ssl-auto-site-builders.md): Tilda, Wix, Shopify, Prom, Horoshop and other site builders issue a free certificate themselves and don't accept another one — no need to buy SSL. - [Certificate link — developer reference](https://zrazu.com/en/docs/ssl-auto-pull-api.md): Addresses, formats, response codes, conditional requests, limits and security rules of the personal certificate link — for your own integrations and AI agents. ## Monitoring - [What ZRAZU monitoring checks](https://zrazu.com/en/docs/monitoring-checks.md): Monitoring watches your domain, delegation, DNSSEC, certificate, mail and website, and writes to you only when something is really broken. - [Add domains to monitoring and the plan](https://zrazu.com/en/docs/monitoring-add.md): How to put domains from other registrars on monitoring with a list, a CSV file or Cloudflare, and how the free and paid monitoring plans work. - [Monitoring notifications and incidents](https://zrazu.com/en/docs/monitoring-alerts.md): Where domain alerts go, how to connect email, Telegram or a webhook, set quiet hours, and what to do when an incident is opened. ## Account and payment - [Getting started: sign-up, sign-in, organization](https://zrazu.com/en/docs/account-start.md): How to create a ZRAZU account, sign in with a password, an email link or a passkey, create an organization and switch between organizations in the dashboard. - [Team and roles in an organization](https://zrazu.com/en/docs/account-team.md): How to invite a colleague to your organization, which role to give, what each role can do, how to change a role or remove a person and where the sign-in log is. - [Sign-in security: passkey, code, sessions](https://zrazu.com/en/docs/account-security.md): How to protect a ZRAZU account: add a passkey or an app code, save backup codes, change the password and email, close other sessions and recover access. - [Balance and payment: card and IBAN invoice](https://zrazu.com/en/docs/account-balance.md): How to top up your ZRAZU balance by card or by an IBAN invoice, save a card, pay for an order, and what to do if a payment didn't go through. - [Invoices, acts and payers](https://zrazu.com/en/docs/account-documents.md): How to add a payer so invoices and acts are issued to a company or sole proprietor, where to find and download them and how to export the money history as CSV. - [Contacting support from the dashboard](https://zrazu.com/en/docs/account-support.md): How to write to ZRAZU support from the dashboard, email or Telegram, what to include in a request, how to follow the reply and what support never does. ## API and MCP - [ZRAZU API — developer overview](https://zrazu.com/en/docs/api-overview.md): Base address, key sign-in, idempotency, error format and limits of the ZRAZU API — for your own scripts, integrations and AI agents. - [API keys — how to create and restrict](https://zrazu.com/en/docs/api-keys.md): How to create an API key in the ZRAZU cabinet, choose its rights, domains, IP addresses and term, and revoke the key if it ends up in the wrong hands. - [Domains and DNS through the API — examples](https://zrazu.com/en/docs/api-domains-dns.md): Examples of ZRAZU API requests: list domains, monitoring, read a DNS zone, change records, create a zone and check delegation. - [MCP for AI agents — domain passport](https://zrazu.com/en/docs/api-mcp.md): How to connect the ZRAZU MCP server to Claude, ChatGPT or Cursor: the address, the domain passport tool, limits and what the agent never sees. ## Resellers and studios - [How to become a ZRAZU reseller](https://zrazu.com/en/docs/resellers-program.md): How to sell .UA domains and SSL from your own billing at wholesale prices: the form in the cabinet, the contract, the sandbox and the live login. - [EPP connection in the reseller cabinet](https://zrazu.com/en/docs/resellers-epp.md): How a reseller creates a sandbox login, sets a password, adds IP addresses and a certificate, confirms mass actions and revokes access in the ZRAZU cabinet. - [Reseller price list in the cabinet](https://zrazu.com/en/docs/resellers-prices.md): Where a reseller sees wholesale domain and SSL prices next to storefront retail prices, what currency they are in, how to read the table and why it is current. - [ZRAZU modules for WHMCS](https://zrazu.com/en/docs/resellers-whmcs.md): How a reseller installs the "ZRAZU Domains" and "ZRAZU SSL" modules in WHMCS: download the archive, test in the sandbox and issue a key for live mode. - [Web studio cabinet](https://zrazu.com/en/docs/resellers-studio.md): How a web studio manages clients' domains in one ZRAZU cabinet: joining, a tier by domain count, clients, prices, a monthly statement and transfers.