This topic describes the renewal notification policies that are used when your SSL certificate is due to expire. This allows you to renew your SSL certificate in a timely manner. If your certificate expires, your services are interrupted.

Overview

Certificate type Renewal notification policy
Paid certificate Sequential notification policy
Uploaded certificate General notification policy

Sequential notification policy

If a certificate that is purchased and issued by using SSL Certificates Service is due to expire, Alibaba Cloud sends renewal notifications starting from 30 calendar days before the certificate expires. Three consecutive calendar days are a notification cycle. Within a notification cycle, Alibaba Cloud sends renewal notifications to the certificate application contact, information management contacts, and contacts registered for your Alibaba Cloud account in sequence. The following table describes the details about the notification policy.

Notification level Notification recipient Notification time within a notification cycle Notification method Description
Level 1 Certificate application contact The first day
Notice If the certificate is renewed on the first day, Alibaba Cloud no longer sends renewal notifications. If the certificate is not renewed on the first day, Alibaba Cloud sends a renewal notification to the information management contacts on the next day.
Email The certificate application contact is the contact that you specified when you submit the certificate application. Make sure that you specify valid information about the contact when you submit the certificate application. For more information, see Apply for a certificate.
Level 2 Information management contact The second day
Notice If the certificate is renewed on the second day, Alibaba Cloud no longer sends renewal notifications. If the certificate is not renewed on the second day, Alibaba Cloud sends a renewal notification to the contacts registered for your Alibaba Cloud account on the next day.
Email The information management contacts are the contacts for which Receive Renewal Notification is set to Yes. You can set Receive Renewal Notification on the Information Management page of the SSL Certificates Service console. If you set Receive Renewal Notification to Yes when you create or edit an information management contact, the contact can receive renewal notifications. For more information, see Manage contacts.
Level 3 Contact registered for your Alibaba Cloud account The third day
Notice If the certificate is renewed on the third day, Alibaba Cloud no longer sends renewal notifications. If the certificate is not renewed on the third day, the next round of renewal notifications is triggered, and Alibaba Cloud sends renewal notifications to the certificate application contact, information management contacts, and contacts registered for your Alibaba Cloud account in sequence.
Email and internal message The contacts registered for your Alibaba Cloud account are the contacts that you specify for Account Contact of Notifications of Product Expiration in the Message Center console.

Message Center is a message management center that is provided for Alibaba Cloud accounts. If you want to change the contacts, you must log on the Message Center console, open the Common Settings page, find Notifications of Product Expiration, and then click Modify below Account Contact.

For example, if your certificate expires on December 30, 2021, Alibaba Cloud sends a renewal notification to the certificate application contact on December 1, 2021.

If your certificate is not renewed on December 1, 2021, Alibaba Cloud sends a renewal notification to the information management contacts for which Receive Renewal Notification is set to Yes on December 2, 2021.

If your certificate is not renewed on December 2, 2021, Alibaba Cloud sends a renewal notification to the contacts registered for your Alibaba Cloud account on December 3, 2021.

If your certificate is not renewed on December 3, 2021, the next round of renewal notifications is triggered, and Alibaba Cloud sends renewal notifications to the certificate application contact, information management contacts for which Receive Renewal Notification is set to Yes, and contacts registered for your Alibaba Cloud account in sequence.

If your certificate is renewed, Alibaba Cloud no longer sends renewal notifications. If your certificate is not renewed, Alibaba Cloud sends renewal notifications until the last calendar day before your certificate expires. If your certificate is not renewed on the last calendar day before your certificate expires, the website that is associated with the certificate can no longer provide HTTPS services.

General notification policy

Starting from 30 days before a certificate expires, Alibaba Cloud sends a renewal notification to the contacts registered for your Alibaba Cloud account, the certificate application contact, and the contacts for which you set Receive Renewal Notification to Yes on the Information Management page of the SSL Certificates Service console.