---
title: 'Custom Certificate for UDR'
url: 'https://www.ondrejsramek.cz/en/blog/vlastni-certifikat-pro-udr'
markdown: 'https://www.ondrejsramek.cz/en/blog/vlastni-certifikat-pro-udr.md'
lang: en
date: '2026-02-03'
description: "A Let's Encrypt certificate on a Unifi Dream Router instead of a self-signed one: DNS-01 validation through the Active24 API and the udm-le project."
taxonomy:
  tag:
    - ubiquiti
    - 'Lets Encrypt'
    - unifi
    - 'Dream Router'
  '':
    - ''
  archives_year:
    - '2026'
---

# The end of self-signed certificates

I decided to deploy a Let's Encrypt certificate on my Unifi Dream Router. Since I own a domain and Active24 is one of the providers that supports API access for domain management, I wanted to take advantage of it. What I needed was DNS validation — DNS-01. After a bit of digging I used the following [project](https://github.com/kchristensen/udm-le). You won't find Active24 listed there, but the official Active24 client [supports it](https://go-acme.github.io/lego/dns/active24/). All you need are the variables \_ACTIVE24\_API*KEY* and \_ACTIVE24*SECRET*. The DNS provider is set to *active24*.

The primary motivation was the UDR block page that pops up when a user browses where they shouldn't. For the same reason I have a Let's Encrypt certificate on AdGuard Home. But more on that next time.

 [ Previous Post](https://www.ondrejsramek.cz/en/blog/pomale-vareni) [Next Post ](https://www.ondrejsramek.cz/en/blog/zabezpeceni-dns) 

#### Other Related Posts:

 [  adguard  ](https://www.ondrejsramek.cz/en/blog/tag:adguard#blog_list) [  DNS  ](https://www.ondrejsramek.cz/en/blog/tag:DNS#blog_list) [  Lets Encrypt  ](https://www.ondrejsramek.cz/en/blog/tag:Lets%20Encrypt#blog_list) [  Active24.cz  ](https://www.ondrejsramek.cz/en/blog/tag:Active24.cz#blog_list) [  DoH  ](https://www.ondrejsramek.cz/en/blog/tag:DoH#blog_list) 

###  DNS Security 

[DNS Security](https://www.ondrejsramek.cz/en/blog/zabezpeceni-dns)

# DNS over HTTPs

![Animation of the AdGuard Home dashboard: general statistics, top clients, top queried domains and top blocked domains](https://www.ondrejsramek.cz/user/pages/05.blog/zabezpeceni-dns/68747470733a2f2f63646e2e6164746964792e6f72672f7075626c69632f416467756172642f436f6d6d6f6e2f616467756172645f686f6d652e676966.gif)
Since I'd already gone to the trouble of generating a certificate for the UDR, I made one for AdGuard Home too. For DoH to work you need a wildcard certificate. Active24 supports DNS-01 via its API, so issuing it is no problem.
The advantage of DoH is that HTTPS is already open (t...

 8th Feb 2026 

 [  wifi  ](https://www.ondrejsramek.cz/en/blog/tag:wifi#blog_list) [  ubiquiti  ](https://www.ondrejsramek.cz/en/blog/tag:ubiquiti#blog_list) [  alienfi  ](https://www.ondrejsramek.cz/en/blog/tag:alienfi#blog_list) 

###  WiFi 6 

[WiFi 6](https://www.ondrejsramek.cz/en/blog/wifi-6)

# IEEE 802.11 ax

When sorting out connectivity in the flat I didn't want VDSL — 30 Mbit through a modem is embarrassing. Wireless internet didn't work out in the end so I landed on a 5G modem. The [box](https://www.o2.cz/osobni/internet/5g-internet-na-doma) that O2 had custom-made doesn't offer much. More like nothing than a lot. Need multiple Wi-Fi net...

 20th Nov 2022 

- [Intro](https://www.ondrejsramek.cz/en)
- [Projects](https://www.ondrejsramek.cz/en/projects)
- [Portfolio](https://www.ondrejsramek.cz/en/portfolio)
- [Pricing](https://www.ondrejsramek.cz/en/pricing)
- [Blog](https://www.ondrejsramek.cz/en/blog)
- English 

    - [Čeština](https://www.ondrejsramek.cz/cs/blog/vlastni-certifikat-pro-udr)

---

## Navigation

- Parent: [Blog](https://www.ondrejsramek.cz/en/blog.md)
- Previous: [DNS Security](https://www.ondrejsramek.cz/en/blog/zabezpeceni-dns.md)
- Next: [Slow Cooking](https://www.ondrejsramek.cz/en/blog/pomale-vareni.md)