Why Alibaba Cloud Certificate Management Service
Digital certificates encrypt communications, verify identities, protect data integrity, and establish trust between parties — making them essential for safeguarding sensitive information and meeting security requirements. Alibaba Cloud Certificate Management Service delivers a secure, unified platform that integrates SSL certificate lifecycle management with digital certificate applications from leading CAs like DigiCert and GlobalSign.
-
Direct CA Partnership
Trusted issuance through global leading CAs such as DigiCert and GlobalSign, delivering certificates with high security, verified trust levels, and proven reliability.
-
Automated Management
Automated lifecycle management with real-time detection and renewal of expiring certificates, continuous status monitoring, and configurable alerting for every certificate in your inventory.
-
One-Click Cloud Deployment
One-click deployment of certificates to Alibaba Cloud services such as WAF, ALB, and NLB directly from The console, with ongoing expansion to additional cloud services.
-
7-Day Money-Back Guarantee
After you place a purchase order, you are eligible for a 7-Day money-back guaranteeunder any of The following conditions: A certificate application is not submitted, no gateway resource calculation quantity (GRCQ) quota is consumed by using the HTTPS acceleration gateway feature, or the root CA or intermediate CA that is enabled for private certificates is reset.
-
Full Lifecycle APIs
Full-lifecycle Lifecycle coverage for certificate purchase, application, issuance, download, and upload — enabling automated management workflows with greater efficiency and flexibility.
-
Tools
Free built-in tools including SSL certificate format conversion and certificate status detection, giving you cross-platform compatibility across systems and devices and early visibility into certificate health for timely action.
Scenarios
HTTPS Encryption for Websites, Apps, and Mini Programs
HTTP websites are prone to data theft. HTTP websites that do not meet the security authentication requirements of browsers are marked as insecure upon access to the websites. As a result, users cannot access the websites, and related apps or mini programs cannot be published. This affects business development. If a web page is protected by a digital certificate, a green address bar is displayed in a browser, and a lock icon and The HTTPS prefix are displayed in the address bar. 
Identity Validation
SSL is critical for PCI DSS compliance. When users visit your website, The certificate verifies your identity and establishes trust. This protects your site against phishing, man-in-The-middle attacks, and other threats—while also boosting your search engine rankings.Tamper and Leak Prevention
During data transmission, encrypted connections are established to ensure the confidentiality of transmitted data. This also protects account security and prevents data from being tampered with or leaked. Search Engine Ranking Boost
You can use certificates to improve the trust level of your website, improve user experience, accelerate page loading, and optimize mobile device experience. This helps the website achieve a higher search engine ranking.
SSL certificate selection guide > Purchase SSL Certificates >
SSL Certificates
|
Certificate Type
|
Verification Method
|
Applicable Website
|
Issuing Time
|
Supported Certificate Brand
|
Price
|
|
|---|---|---|---|---|---|---|
| Domain Validation | DNS verification only — domain name submission required | Non-transactional sites with no personal data collection, such as blogs and personal websites | Certificate issuance in as few as 10 minutes |
Alibaba Cloud DigiCert GlobalSign Rapid |
From $ 66 USD per certificate-year | Buy Now |
| Organization Validation | Domain name, enterprise information, and valid business license submission required | E-commerce websites, applications, and small-to-medium enterprise sites | Typical issuance within three to seven business days, with a minimum of one business day |
DigiCert GlobalSign GeoTrust |
From $ 307.12 USD per certificate-year | Buy Now |
| Extended Validation | Domain name, enterprise details, actual operations information, and a valid business license | Large financial platforms, enterprise websites, and government organization sites | Typical issuance within three to seven business days, with a minimum of two business days | DigiCert | From $ 1053.36 USD per certificate-year | Buy Now |
SSL Public Domain
|
Value-added
|
Applicable Website
|
Price
|
|
|---|---|---|---|
| Monitor Public Domain Name | The monitoring service that can monitor the availability of https connections for domain names accessed by the public network Includes available monitoring and alarms for domain name https access, certificates, certificate chains, etc. | From $ 1.95 USD per year | Buy Now |
Integrated SSL Security and Content Acceleration
HTTPS Acceleration Gateway seamlessly integrates SSL certificates with Alibaba Cloud CDN (CDN) to accelerate and encrypt HTTPS-based access for websites and provide fully managed services. You do not need to perform certificate O&M. You can improve the performance and security of your website with ease and view the details of resource usage. This way, your costs are more controllable, and you can manage your budget with ease. Significantly Reduced Certificate O&M
No need to apply for, deploy, or update certificate of the origin server. You can access the HTTPS Acceleration Gateway by only resolving the domain name. Automatic renewal is also supported. Support Monthly Subscription
You can subscribe to the HTTPS Acceleration Gateway feature on a monthly basis. This minimizes your investment and you can flexibly extend the subscription duration based on your business requirements. Website Acceleration
The HTTPS Acceleration Gateway feature enhances both the access speed and user experience, and also reduces the workload of the origin server.
Purchase guide for the HTTPS Acceleration Gateway feature > Purchase HTTPS Acceleration Gateway >
HTTPS Acceleration Gateway Instance
|
Edition
|
Applicable Website
|
Price
|
|
|---|---|---|---|
| Starter Edition - Single Domain Name | Supports HTTPS acceleration for personal website testing. Domain names ending in .org or .jp are not supported. | $ 1.60 USD per instance-month | Buy Now |
| Basic Edition - Single Domain Name | Supports HTTPS acceleration for a single domain name of any type. | $ 27.60 USD per instance for six months | Buy Now |
| Basic Edition - Wildcard Domain Name | Supports wildcard domain names, enabling HTTPS encryption and acceleration across all subdomains and site resources. | $ 117.60 USD per instance for six months | Buy Now |
Mutual Authentication
Protection against common web application threats including traffic attacks from unauthorized clients, untrusted connections, and insecure data transmission in B2B environments. Compliance support for industries with strict data confidentiality and protection requirements through digital certificate enforcement.Meet Requirements for Two-way SSL Authentication
Two-way SSL authentication helps ensure that both identities of a connection are trusted and prevents man-in-the-middle attacks. For example, two-way SSL authentication is required for remote procedure call (RPC) connections and IoT devices.Improve Server-side Traffic Security
Two-way authentication helps block access from untrusted clients and improve server-side traffic security.
Apply for a free trial of PCA > Purchase and enable a PCA >
Private Root CA
|
Certificate Algorithm
|
Benefits
|
Supported Private Key Algorithm
|
Price
|
|
|---|---|---|---|---|
| RSA | Rivest-Shamir-Adleman (RSA) algorithm — global standard with The highest compatibility across browsers and devices | RSA_1024, RSA_2048, RSA_4096 | $ 760.00 USD per month | Free Trial |
| ECC | Elliptic curve cryptography (ECC) algorithm — high compatibility and security with shorter key lengths and lower computing overhead compared to other algorithms at The same security level | ECC_256, ECC_384, ECC_512 | $ 800.00 USD per month | Free Trial |
| SM | ShangMi (SM) algorithm — compliant with China's national cryptographic standard, widely adopted in The Chinese mainland | SM2_256 | $ 1000.00 USD per month | Free Trial |
