After you purchase an SSL certificate instance, you must use Certificate Management Service to submit a certificate application to the certificate authority (CA). After the CA approves your certificate application, the CA issues the certificate. You can install the certificate on your web server. This way, your website on the web server is accessible over HTTPS. This topic describes how to submit a certificate application.

Background information

You can use a certificate instance that you purchase to directly apply for a single-domain certificate, wildcard certificate, or a multi-domain certificate. A multi-domain certificate can be bound to up to five single domain names. You cannot use the certificate instance to apply for a multi-domain wildcard certificate or a hybrid certificate. If you want to apply for a multi-domain wildcard certificate or hybrid certificate of the organization validated (OV) or extended validation (EV) type, you can combine multiple certificate instances that you purchase and use the combined certificate instance to apply for the certificates. For more information, see Combine certificate instances.

Prerequisites

A certificate instance is purchased. For more information, see Purchase an SSL certificate.

Procedure

  1. Log on to the Certificate Management Service console.
  2. On the Manage Certificates tab of the SSL Certificates page, select Pending Application from the status drop-down list above the certificate list.
    This operation queries all your purchased certificate instances for which no certificate applications are submitted.
  3. Find the certificate instance for which you want to submit a certificate application and click Apply for Certificate in the Actions column.
  4. In the Apply for Certificate panel, configure the parameters.
    The parameters that are displayed vary based on certificate types. Configure the parameters as prompted.

    For more information about the parameters, see Required information for certificate application.

  5. Submit your certificate application to the CA for review.
    After you configure the parameters, perform the following operations based on the type of the certificate that you want to apply for:
    • Domain validated (DV) certificate: Click Next, complete the verification of domain name ownership as prompted, and then click Submit.

      For more information about how to complete the verification of domain name ownership, see Verify the ownership of a domain name.

    • OV or EV certificate: Click Submit.
    After you submit your certificate application, the following message appears. Make sure that the phone calls from the CA are properly answered and check the verification email at the earliest opportunity. The CA sends the verification email to your contact email address. Message after you submit an application

    If you want to modify the application information after you submit the certificate application, you can cancel the application, modify the information, and submit the application again.

Review durations for different certificates

DV certificate

In most cases, the CA completes review and issuance within 1 to 2 business days after you submit a certificate application for a DV certificate.

Important If a DV certificate is not issued more than 1 hour after you submit the certificate application, check whether the DNS record is correct.

OV or EV certificate

After you submit a certificate application for an OV certificate or an EV certificate, the CA completes review and issuance within 3 to 7 business days.

Important If the OV or EV certificate is not issued more than 1 business day after you submit the certificate application, check whether you missed a phone call from the CA or an email that contains the instructions for verifying the ownership of your domain name. If you do not receive the phone call or email, you can search for and join the DingTalk group numbered 32435999. If you receive the email, we recommend that you perform the required operations that are indicated in the email to verify the ownership of your domain name at the earliest opportunity. This way, the period of time that is required to review your certificate is reduced.

What to do next

Before the certificate is issued

Note If you want to modify the information in your certificate application before the certificate is issued, cancel the application, modify the information, and then submit the application again. After the certificate is issued, you can no longer cancel the application.
After you submit your certificate application, you can check the review progress in the Status column. To check the progress, click the Status icon. In the message that appears, click View Progress to view the progress in the Apply for Certificate panel. Progress of certificate application review

The CA uses different methods to review applications for different types of certificates. To make sure that your certificate can be issued, you must cooperate with the CA and perform the required operations based on the certificate types. The following table describes the required operations.

Certificate type Required operation
DV certificate Wait for the CA to review your certificate application. After the CA approves the application, the CA issues the certificate.

You can view the status of the certificate in the certificate list. After the certificate is issued, the value of Status for the certificate changes to Issued.

OV or EV certificate After the CA receives your certificate application, the CA verifies the information in your application. The CA issues the certificate only after the information passes the verification. The application requirements vary based on CAs. Therefore, the time required for verification varies based on CAs.
After you submit your certificate application, you must cooperate with the CA staff to complete the following verification process:
  • Domain name verification: After the CA receives your certificate application, the CA sends an email for domain name verification to your contact email address. You must complete the verification based on the following process. Verification process
    Note If your domain name fails the verification, the CA rejects your application, and your certificate status remains Validating Application.
  • Optional:Verification by phone: The CA staff may contact you by phone to verify the information in your application. Make sure that the phone calls from the CA are properly answered.

After your certificate application is approved, you can view your certificate status in the certificate list. After the certificate is issued, the value of Status for the certificate changes to Issued.

If your certificate application is rejected, the value of Status for the certificate changes to Validation Failed. You can view the cause of the failure in the Status column. To view the cause of the failure, click the Verification failed icon icon in the Status column. In the message that appears, click View Cause to view the cause of the failure in the Apply for Certificate panel. You must modify the information in your application, especially the enterprise qualification information, based on the cause of the failure. Then, submit the application again. Verification failed

After the certificate is issued

After the certificate is issued, the value of Status for the certificate changes to Issued. You can view the operations that you can perform on the issued certificate in the Status column. You can click the Issued icon icon in the Status column. In the message that appears, click Download to download the certificate. For more information about how to install a certificate, see Installation overview.