1. Log on to the Alibaba Cloud Certificates purchase page to purchase an SSL certificate.

  2. Select the digital certificate and make the payment to enter the certificate configuration process.

Select a region.

We recommend that you select the region according to location of your website server that your certificate to be installed on.

Certificate brand (CA provider)

Alibaba Cloud works with the following CA to issue digital certificates:

Entrust: Entrust is the world’s leading public key infrastructure provider. It has built a trusted virtual environment that facilitates communication, around the world. Entrust provides trust services to web sites, software developers, and individuals, this includes issuing SSL server certificates that specifically respond to web site authentication and encryption, more than 83% of the world's top 500 enterprises use the entrust SSL server certificate.

Certificate type

In conjunction with qualified Certificate Authorities (CAs), Alibaba Cloud provides the following options to configure your digital certificates:

  • OV SSL: A type of OV SSL (Organization Validation SSL) certificate. Details of an SSL Professional certificate include:
    • The CA verifies domain ownership and organization identity.
    • The requester’s business name is displayed in the certificate.
    • The certificate provides strong encryption for communication links.
    • The certificate supports up to 100 domains, and supports wildcard domains.
  • EV SSL: A type of EV SSL (Extended Validation SSL) certificate. Details of an SSL Advanced certificate include:
    • The CA strictly verifies domain ownership and organization identity.
    • A green address bar is displayed for this certificate in most browsers (the Safari browser has some exceptions).
    • The requester’s organization identity details are displayed in the certificate.
    • The certificate provides strong encryption for communication links.
    • The certificate supports up to 100 domains.

Domain protection

Before purchasing a digital certificate, you must determine the type and number of domains you want to secure with the certificate. You can secure single or multiple domains, or wildcard domains.

  • Single domain: Your digital certificate can only protect one domain (for example, buy.example.com) and does not support wildcards.
  • Multiple domains: Your digital certificate can protect multiple domains (for example, buy1.example.com and buy2.example.com) though the maximum number of domains varies according to the certificate type. Generally, up to 100 domains can be secured. You can select on the basis of the number of Domains option. However, the wildcard domains are not supported.
  • Wildcard domains: Your digital certificate can protect an extensive domain with a wildcard. Certificates for securing multiple wildcard subdomains are currently unavailable. For example, with the wildcard domain, *.example.com, you can protect domains such as a1.example.com and a2.example.com, but not a1.sport.example.com or a2.thanks.example.com.
Note
Alibaba Cloud verifies the number and type of domains you select when you enter the domain information. If you select to protect multiple domains, you must submit all selected domains at the same time.

Certificate validity period

Every digital certificate has a validity period. The validity period of the digital certificate is calculated after the certificate is issued. You can select one or two years for the certificate validity period.