Friends, Google Blogger has officially launched an HTTPS feature for Custom Domains. You can read complete details in the article – HOW TO ENABLE HTTPS ON A BLOGGER BLOG HAVING A CUSTOM DOMAIN?

You may use the latter part of this article to fix the Mixed Content Issue on your Blogger blog.

BELOW METHOD IS NOT REQUIRED ANYMORE :)

Folks, today I am going to explain the most important thing about your blog. A few of you asked me how I can use Free SSL Certificate (HTTPS) on blogger if using a custom domain.

I am going to show you step by process of implementing HTTPS on blogger with a custom domain. Also, this article covers the use of the content delivery network (CDN) to make your blog fast.

Google recommend HTTPS and consider it as a ranking signal. Which means you can get higher ranking in the search engine if using HTTPS instead of HTTP.

Don’t worry, now SSL is absolutely free for blogs.

Google Blogger is giving an opportunity to use free SSL certificate HTTPS for Blogspot subdomain. But what about those who are using a custom domain. Is there a way to use Free SSL Certificate i.e. HTTPS on such blogs?

Who know when Google is going to launch this feature for your blog. I am here to help you in this case. Read this article carefully which tells about implementing free SSL Certificate (HTTPS) on your Blog if using a custom domain.

Nothing is complicated. Just follow the simple steps given hereunder.

Advantages of Using SSL Certificate on blogs

Before starting implementation steps, you must know a few advantages of using a free SSL certificate (HTTPS) on a blog.

1. Your blog will be marked as secured in eyes of search engines.
2. SSL certificate enables a secure connection between visitors and blog.
3. Free SSL Certificate from Cloudflare guarantees faster blog because of CDN.
4. SSL Certificate aka HTTPS is a ranking signal now.
5. The blog looks more professional.

A few Disadvantages –

1. You’ve to re-submit sitemap to Google Search Console. Google will index your pages but start from scratch.
2. After successful implementation of HTTPS don’t rollback if you do then Google will deindex your blog.

Steps to Use free SSL Certificate on A Blogger Blog if Using A Custom Domain.

Cloudflare CDN makes your blog fast and free SSL certificate gives improved SERP.

1. Add Blog on Cloudflare

1a. Create a free Cloudflare account, add your blog and Scan DNS Records

cloudflare domain scan

cloudflare continue step

1b. The scan takes a few minutes and after that, you see the two Cloudflare name servers. You need to add these name servers to your blog domain.

cloudflare verify dns records

cloudflare continue setup

cloudflare free plan

cloudflare recheck nameserver

1b.1. Open your domain registrar dashboard and move to domain setting. Which may be different for different registrars.

1b.2. There you get the Option to change Name Servers. Click on that and replace old nameservers with the new.

cloudflare update nameserver

1b.3. Performed changes may reflect after 24 hrs or more but your blog will run smoothly.

2. Enable Free SSL Certificate (HTTPS)

2a. Go to Crypto Tab (Click the lock icon)

2b. Set SSL to Flexible

cloudflare ssl flexible

2c. Set Always use HTTPS to On

cloudflare always to https

2d. Set Automatic HTTPS Rewrite On

cloudflare auto https rewrite

Congrats! All done. But it may take a few hours to authorize certificate. So keep patient and pause the Cloudflare meanwhile.

3. Redirect Homepage, Posts, and Pages to HTTPS

3a. Go to Page Rules tab (Click the funnel icon)

3b. add the following page rules your blog URL (change anandbakshi.com with your custom domain)

cloudflare page rule 1

cloudflare page rule 2

cloudflare page rule 3

4. Cloudflare Security Level

Once you are done with above 3 page rules. Now set the security level

4a. Go to Firewall tab (Click the shield icon)

4b. Set security level Low

cloudflare security level low

Now you can leave you Cloudflare account.

5. Force homepage to HTTPS

To do this you’ve to add the custom javascript in your theme under <head>

5a. Open blog’s theme HTML Editor

5b. Look for <head>

5c. Copy & paste the javascript below <head>

<script async='' type="text/javascript">
if(window.location.protocol != 'https:') {
 location.href = location.href.replace("http://", "https://");
}
</script>

5d. Using default or custom themes. Must check the following code.

<form expr:action='data:blog.searchUrl'>

If the code is within your blog theme then replace it with

<form expr:action='data:blog.searchUrl.https'>

5e. Now save your blog theme.

Important Tips: You must host images through blogger dashboard or services which are using an SSL certificate. The way you can take full advantage of an SSL Certificate. Otherwise, your blog will be shown insecure.

6. Analyze and Fix the Mixed Content

It is possible to have a mixed content issue after using an SSL certificate.

6a. Open your blog on Google Chrome

6b. Press Ctrl+Shift+J keys to open the Javascript console tab.

6c. The mixed content warning may like this.

“Mixed Content: The page at ‘https://yourcustomdomain.tld/’ was loaded over HTTPS, but requested an insecure script ‘http://<some-url>/script.js’. This request has been blocked; the content must be served over HTTPS.”

6d. You can go to Google Blogger Support page to fix the errors.

Other Important Things

6e. You may need to re-upload logo, favicon and other images in your blog/blog post.

6f. You may get the mixed content warning on the archive, label and search pages. Fixed this thing with step 5d.

7. Edit Robots.txt

7a. Go to Blogger > Settings > Search Preferences

7b. Look for Crawlers and indexing. Here edit Custom robots.txt and add the following –

User-agent: Mediapartners-Google
Disallow:
User-agent: *
Disallow: /search
Allow: /
Sitemap: https://www.yourcustomdomain.tld/sitemap.xml

Make sure to change your domain.

8. Resubmit Sitemap to all Webmaster Tools

Now time for resubmit sitemap to different search engines like Google, Bing, and Yandex.

Your blog sitemap file name is sitemap.xml

and can be found at the following location –

http://yourcustomdomain.tld/sitemap.xml

Note-

This method has some bugs like sitemap.xml does not have https link for any of the blog posts. So it is possible to search engines will crawl and collect both or one version of the blog post whether HTTP or HTTPS.

I believe this guide is useful for you and you’ll be able to use free SSL certificate your custom domain if using Blogger.

33 COMMENTS

  1. Nicz.I need some tips related to your content..I am working in Franchise Erp Software In Chennai. If You need any more information kindly make me call to this number 044-6565 6523.

  2. Dear sir you are provide great information but page speed insights tool shown my blogger avoid landing page redirects in mobile version,I don’t know how to do it,please tell me,I show you example below:
    Avoid landing page redirects for the following chain of redirected URLs.
    bloggerguider.com/
    bloggerguider.com/?m=1
    bloggerguider.com/?m=1

  3. Choosing flexible is not so good. This may slow down your site. I suggest you to use full SSL for better security and speed.

  4. Please sir I want to ask you some thing to enable custom https on ur domain is it must i will use custom robots txt to rank well , because some people say that if I didn’t use custom robots tzt also I will not rank well so advice pls

    • Read our new article. If you are not able to see option add HTTPS over the custom domain. Then wait Google is rolling out this feature to all Blogger dashboards.

  5. nice post sir !

    now we using godaddy ssl / HTTPS for blogger.

    sir, can we use to free ssl security / HTTPS ?

    because our blog renewal date will be after 3 months late.

    thank you

  6. Nice Article.
    It’s important that your business website is safe & secure.
    #SSL certificates bring a lot of benefits for your #business – they protect your customers, make you look more trustworthy and help you to avoid #Google penalties.

  7. Such an instruction is really practical. Can you also do this for cacert.org? The certificates of cacert.org are valid eight times longer and the user is personally verified twice in the Web of Trust. More security is really not possible.

  8. I have a problem sir, Whenever i visit my is loading, It shows the green lock and then turn off. Whats the cause plkease, I did everything instructed here. Site is HDstreamhub.com

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.