diff --git a/jupyterhub/singleuser/extension.py b/jupyterhub/singleuser/extension.py
index d9d9f55d..c1eafffc 100644
--- a/jupyterhub/singleuser/extension.py
+++ b/jupyterhub/singleuser/extension.py
@@ -502,6 +502,13 @@ class JupyterHubSingleUser(ExtensionApp):
         # to make sure it has the desired effect
         cfg.default_url = self.default_url = self.get_default_url()
 
+        # load SSL configuration
+        cfg.keyfile = os.environ.get('JUPYTERHUB_SSL_KEYFILE') or ''
+        cfg.certfile = os.environ.get('JUPYTERHUB_SSL_CERTFILE') or ''
+        cfg.client_ca = os.environ.get('JUPYTERHUB_SSL_CLIENT_CA') or ''
+        if cfg.certfile:
+            self.serverapp.log.info(f"Using SSL cert {cfg.certfile}")
+
         # Jupyter Server default: config files have higher priority than extensions,
         # by:
         # 1. load config files