This topic describes the renewal notification policy that is used when your SSL certificate is due to expire. This allows you to renew your SSL certificate at the earliest opportunity. If your SSL certificate expires, your services are interrupted.

Sequential notification methods

If a certificate is due to expire, Alibaba Cloud sends renewal notifications to the certificate application contact, information management contacts, and contacts registered for your Alibaba Cloud account in sequence in the following methods:
  • Alibaba Cloud sends a renewal notification to the certificate application contact by email. The certificate application contact is the contact that is specified when the certificate is applied for.
    Notice Make sure that the information about the contact that is specified when the certificate is applied for is valid. For more information, see Apply for a certificate.
    Certificate application contact

    If the certificate is renewed on the day the renewal notification is received, Alibaba Cloud no longer sends a renewal notification. If the certificate is not renewed on the day the renewal notification is received, Alibaba Cloud sends a renewal notification to the information management contacts on the next day.

  • Alibaba Cloud sends a renewal notification to the information management contacts by using emails. The renewal notification is sent to all contacts that are specified on the Information Management page in the SSL Certificates Service console.
    Notice Make sure that the information about the contacts on the Information Management page is valid. For more information, see Manage contacts.
    Information management contact

    If the certificate is renewed on the day the renewal notification is received, Alibaba Cloud no longer sends a renewal notification. If the certificate is not renewed on the day the renewal notification is received, Alibaba Cloud sends a renewal notification to the contacts registered for the Alibaba Cloud account to which the certificate belongs on the next day.

  • Alibaba Cloud sends a renewal notification to the contacts registered for your Alibaba Cloud account by using emails and internal messages. The registered contacts are the contacts that are specified by Account Contact for Notifications of Product Expiration in the Message Center console.

    Message Center is a message management center that is provided for Alibaba Cloud accounts. If you want to modify the contacts, you must log on the Message Center console, open the Common Settings page, find Notifications of Product Expiration, and then click Modify under Account Contact.

    Notifications of Product Expiration (intl)

    If the certificate is renewed on the day the renewal notification is received, Alibaba Cloud no longer sends a renewal notification. If the certificate is not renewed on the day the renewal notification is received, the next round of renewal notifications is triggered. For more information, see Notification cycle.

Notification cycle

Alibaba Cloud sends renewal notifications from 30 calendar days before your SSL certificate expires. Three consecutive calendar days are a notification cycle. Within a notification cycle, Alibaba Cloud sends renewal notifications to the certificate application contact, information management contacts, and contacts registered for your Alibaba Cloud account in sequence. For more information, see Sequential notification methods.

For example, if your SSL certificate expires on December 30, 2021, Alibaba Cloud sends a renewal notification to the certificate application contact on December 1, 2021.

If the SSL certificate is not renewed on December 1, 2021, Alibaba Cloud sends a renewal notification to the information management contacts on December 2, 2021.

If the SSL certificate is not renewed on December 2, 2021, Alibaba Cloud sends a renewal notification to the contacts registered for your Alibaba Cloud account on December 3, 2021.

If the SSL certificate is not renewed on December 3, 2021, the next round of renewal notifications is triggered.

If the certificate is renewed, Alibaba Cloud no longer sends renewal notifications. If the certificate is not renewed, Alibaba Cloud sends renewal notifications until the last calendar day before the certificate expires. If the certificate is not renewed on that calendar day, the website that is associated with the certificate can no longer provide HTTPS services.