How Are TLS Certificates Selected?

When TLS connections to an endpoint are terminated, ngrok uses the TLS certificate attached to the Domain matching the endpoint's URL.

Each domain on ngrok has an attached TLS certificate, which you can find by:

• Fetching the domain object from the API
  • Or listing all TLS Certificates
• Viewing your TLS Certificates in the dashboard

If the domain object doesn't reference any certificate, or if there is no matching domain object for an endpoint's URL, ngrok selects its own TLS certificate for termination.

You may override the certificate used for TLS termination by explicitly terminating TLS yourself with the terminate-tls traffic policy action.