UIrgent! Which FQDN is better? 3CX FQDN and own FQDN,

[Elvin Mammadov]

Hello,
We want to upgrade to 3CX V15 at the moment. We want to know the difference between 3CX FQDN and our company FQDN? Is 3CX FQDN free for forever and which one is better for performance? And also can we use our self-signed certificate? Thanks in advance.

 

[eagle2]

It's not free. It will be working while you have valid 3CX maintenance.
You must have purchased a SSL certificate, validated by public certificate authority organization.

 

[Elvin Mammadov]

Thank you for your reply. Is there a performance difference between these FQDNs? We have 1 year valid 3CX maintenance. We have our own FQDN. What FQDN do you advice to use, 3CX or own FQDN? Recently for testing purposes, we used 3CX V15 with self-signed certificate, but it worked.

 

[GiannosC_3CX]

Hi Elvin,

Is 3CX FQDN free for forever

The 3CX FQDN is free of charge and is valid until your maintenance date. Noted this FQDN included with SSL certificates by Let’s Encrypt Cert. You can find your maintenance date on Dashboard - Maintenance.
If you have an annual maintenance the 3CX FQDN is automatically renewed. If you do not have an annual maintenance with any product and if the maintenance date expires then the FQDN released on you Public IP and you can't re-use this FQDN, the system immediately block this FQDN for a certain amount of time.

In case you use a customer owned domain ( also requires phone system Standard, Pro or Enterprise Edition) Let’s Encrypt Cert can't be issued by 3CX and you need to renew manually your FQDN and SSL.

you can find more details here :
https://www.3cx.com/docs/fqdn-management-allocation/
https://www.3cx.com/docs/fqdn-management-allocation/#h.ls6x5hi0jy3g
https://www.3cx.com/docs/fqdn-ssl-certificate-v15/

 

[Elvin Mammadov]

If we use our self-signed certificate, it will not work properly?

 

[GiannosC_3CX]

Dear Elvin,

If we use our self-signed certificate, it will not work properly?

There are some major differences between Publicly trusted certificates and self signed certificates but if you choice the self-signed CA possibly you will have issue with remote extension provisioning.

For more details: https://www.3cx.com/blog/docs/ssl-crt-csr/

 

[Elvin Mammadov]

I see 2 SSL brands "Godaddy and Start SSL" on 3cx.com.. What about Rapid SSL and Comodo PositiveSSL Certificate? If I order Rapid SSL certificate or Comodo PositiveSSL Certificate, which offer cheap SSL certificate, then they will work okay with 3CX?

 

[GiannosC_3CX]

Dear elvin,

Please note that any CA in the correct format (.crt, .pfx and .pem) will work with 3CX Phone System.

 

[earthwing]

While any valid SSL will work with 3CX, provisioning can be a challange. For example yealink phones prior to the S series have a limited number of CA's built in . The result is each phone needs to be uploaded a SSL that matches the 3CX server. Then again there are other problems that may be encountered depending the the vendor and if the intermediate cert is required or not.
The counter risk of using a 3cx.com domain the the draconian way in which they will effectively disable your system if support lapses after 7 days. This is specially true if your system is purely internal and there is no value in using some of the added features like the web conferencing.