Vanity URLs

Configuring Vanity URLs with Customer Certificates

Overview

A vanity URL allows you to use a custom domain name for your Thru File Share site instead of the default URL.

This guide explains how Thru sets up and configures vanity URLs using customer-provided SSL certificates.

What is a Vanity URL?

A vanity URL is a custom domain name (e.g., transfer.yourcompany.com) that points to your Thru File Share site.

This provides:

• Brand consistency across your digital properties

• Enhanced user trust and recognition

• Simplified access for your users

Certificate Requirements

To implement a vanity URL, you must provide an SSL certificate in .PEM format with the following specifications:

Certificate Chain Order

Your .PEM file must contain the following certificates in this exact order:

1. Domain Certificate

2. Intermediate Certificate 1

3. Intermediate Certificate 2

4. Root Certificate

Key Requirements

• The private key must be included in the .PEM file

• Key must be unencrypted (no password protection)

• Supported key types: RSA (2048-bit or higher) or ECC (P-256 or P-384)

Implementation Steps

1. Prepare Your Certificate

   • Combine all certificates and private key into a single .PEM file

   • Verify the correct order of certificates

   • Ensure there are no extra spaces or characters between certificates

2. DNS Configuration

   • Create a CNAME record pointing your vanity domain to your Thru File Share site

   • Allow 24-48 hours for DNS propagation

3. Certificate Submission

   • Submit your .PEM file through the Thru Support ticketing portal.

   • Our team will validate the certificate chain and private key

   • You will receive a confirmation once the certificate is successfully installed

Certificate Validation

Before submitting your certificate, verify:

• Certificate chain is complete and properly ordered

• Domain name matches your intended vanity URL

• Certificate is currently valid and not expired

• Private key matches the domain certificate

Maintenance and Renewal

• Monitor certificate expiration dates

• Plan to submit renewed certificates at least 30 days before expiration

• Maintain consistent certificate chain order when submitting renewals

Troubleshooting

Common Issues

• Certificate chain order incorrect

• Missing intermediate certificates

• Private key doesn't match certificate

• Invalid certificate format

• Expired certificates

Resolution Steps

1. Verify certificate chain using OpenSSL

2. Check certificate expiration dates

3. Validate private key matches certificate

4. Ensure proper .PEM formatting

Support

For assistance with vanity URL configuration or certificate issues, contact our support team:

• Email: helpdesk@thruinc.com

• Support Portal: https://www.thruinc.com/support/

Security Notes

• Keep your private key secure and never share it with unauthorized parties

• Use strong encryption for your certificates (minimum 2048-bit RSA)

• Follow industry best practices for certificate management

• Regularly audit your SSL configuration for security vulnerabilities