# Domains

> Register the domains whose TLS certificates back SNI routing.

Source: https://joinnasnet.com/en/guides/nasnet-linux/certificates/domains/
Last updated: 2026-08-14

---

## Overview

**Domains** is the list of domains the panel holds TLS certificates for, used
for SNI routing. Each entry records whether its certificate is issued through
ACME or supplied by you, and when it expires. It is the narrower, domain-first
view of the same material the [Certificates](/en/guides/nasnet-linux/certificates/)
page covers.

## Before you start

- ACME domains need DNS pointing at this server before issuance can succeed.
- A manual domain needs the certificate and key you supply; nothing renews it
  for you.

## Steps

1. Open **Certificates → Domains** from the sidebar.
2. Read the four counters at the top for an immediate picture: **Total**,
   **ACME**, **Manual** and **Expiring Soon**.
3. Search by name to find a domain in a long list.
4. Add a domain with its TLS certificate. The empty state prompts you to do
   exactly this on a fresh install.
5. Click a domain to open its details, or edit it to change its configuration.
6. Renew or delete a domain from its row; both ask for confirmation.

## Reference

| Counter | What it counts |
| ------- | -------------- |
| Total | All registered domains. |
| ACME | Domains whose certificates are issued automatically. |
| Manual | Domains using a certificate you supplied. |
| Expiring Soon | Domains whose certificates are close to expiry. |

## Troubleshooting

**Expiring Soon is not going down after a renewal.** Confirm the renewal
actually completed by opening the domain's details, because a failed ACME challenge
leaves the old certificate in place, and the counter reflects what is installed.

## Related

- [Certificates](/en/guides/nasnet-linux/certificates/)
- [TLS and domains](/en/guides/nasnet-linux/tls-and-domains/)
- [Hosts](/en/guides/nasnet-linux/server/hosts/)