CSR Name |
Enter a name for the CSR.
You can enter letters, digits, underscores (_), and hyphens (-). The name can be up
to 50 characters in length.
|
Domains |
Enter the domain name for which you want to apply for a certificate.
Notice You can enter only one domain name. If you want to apply for the same certificate
for multiple domain names, you can enter one domain name in this field and enter other
domain names in the SANs field.
If you want to use the CSR to apply for a certificate, the value of Domains to Bind that you specify when you apply for the certificate must contain the domain name
that you specify for this parameter.
For example, if you set Domains to aliyundoc.com , the value of Domains to Bind that you specify when you apply for a certificate must contain aliyundoc.com .
|
SANs |
Enter other domain names that share the same certificate with the domain name specified
by Domains. If you enter multiple domain names, separate them with commas (,).
For example, if you want to apply for a certificate for the domain names www.aliyundoc.com , example.aliyundoc.com , and test.aliyundoc.com , you can set Domains to www.aliyundoc.com , and set SANs to example.aliyundoc.com,test.aliyundoc.com .
|
Contact |
Specify the contact for the certificate that you want to apply for. The information
includes the name and phone number of a contact.
If you have not created a contact, you can click Create Contact to create one. Certificate Management Service saves the created contact for you to
use next time. For more information about how to create a contact, see Create a contact.
|
Company |
Specify the company profile for the certificate that you want to apply for. The information
includes the name and phone number of a company.
If you have not created a company profile, you can click Create Company Profile to create one. Certificate Management Service saves the created company profile for
you to use next time. For more information about how to create a company profile,
see Create a company profile.
|
Encryption Algorithm |
Select the type of the key algorithm that you want to use. Valid values:
- RSA: The RSA algorithm is an asymmetric algorithm that is widely used and provides high
compatibility.
- ECC: The ECC algorithm is a public key encryption algorithm based on elliptic curves.
Compared with the RSA algorithm, the ECC algorithm is more advanced and secure. The
ECC algorithm provides faster encryption and higher efficiency at lower server resource
consumption. The ECC algorithm is promoted among mainstream browsers.
- SM2: The SM2 algorithm is developed and approved by the State Cryptography Administration
of China based on the ECC algorithm. The SM2 algorithm is used to replace the RSA algorithm
in Chinese commercial cryptography systems.
|
Encryption Strength |
Select the encryption strength that you want to use.
If you set Encryption Algorithm to RSA, you can select 2048, 3072, or 4096.
If you set Encryption Algorithm to ECC, you can select p256, p384, or p512.
If you set Encryption Algorithm to SM2, the value is fixed as 256.
|