CodePen Projects and Custom Domains: SSL/TLS Provisioning Behavior

CodePen Projects allow Pro users to map custom domains via CNAME records to host front-end demonstrations. While the platform supports this integration, the specific lifecycle of the SSL/TLS certificate provisioning process remains underspecified in the technical documentation.

When transitioning a Project from a CodePen URL to a custom domain, there is uncertainty regarding the automation of certificate issuance and the potential for downtime during DNS propagation. It is unclear if the system handles apex and www subdomains identically or if manual intervention is required for certain DNS configurations.

• Does CodePen automatically issue and renew managed SSL/TLS certificates for all custom domains mapped to Projects?
• What is the expected behavior for traffic continuity during the initial DNS migration and subsequent certificate renewals?