CDN:Deploy an SSL certificate to multiple domain names

Billing

HTTPS secure acceleration is a value-added service billed by the number of HTTPS requests. Data transfer plans cannot offset these fees. For pricing details, see Billing of HTTPS requests for static content.

Prerequisites

Before you begin, make sure you have:

• An SSL certificate purchased from Certificate Management Service

• One or more domain names added to Alibaba Cloud CDN

Deploy or renew an SSL certificate

1. Log on to the Alibaba Cloud CDN console.

2. In the left-side navigation pane, click HTTPS Center.

3. On the Certificate Center page, click Add Certificate.

4. On the Add Certificate page, configure the following parameters.

   Parameter	Description
   Certificate Source	Only SSL Certificates Service is supported. Select a certificate purchased from Certificate Management Service.
   Certificate Name	Select the certificate to deploy.
   Certificate (Public Key)	The PEM-encoded public key. For certificates purchased from Certificate Management Service, the system retrieves this automatically.
   Private Key	The PEM-encoded private key. For certificates purchased from Certificate Management Service, the system retrieves this automatically.

5. Click Next.

6. Select the domain names to associate with the certificate.

   Important

   If a selected domain name already has a certificate, the existing certificate is replaced by the one selected in this step. When Certificate Source is set to SSL Certificates Service, you can deploy or renew the certificate for multiple domain names at once.

   

7. Click OK to deploy or update the certificate.

8. (Optional) To enable end-to-end HTTPS encryption, configure POPs to redirect requests to origin servers over HTTPS. Origin servers must support HTTPS. For details, see Configure the origin protocol policy.

Verify the certificate deployment

The certificate takes effect within 1 minute of deployment. To confirm HTTPS is active, access a resource on the accelerated domain name over HTTPS. A lock icon in the browser address bar confirms that HTTPS secure acceleration is working.

View certificate details

1. Log on to the Alibaba Cloud CDN console.

2. In the left-side navigation pane, click HTTPS Center.

3. On the Certificate Center page, click the certificate you want to view.

The page shows the SSL certificate details for the domain name. The private key is not displayed. Keep your certificate information confidential.

FAQ

• Do I need to configure HTTPS secure acceleration for POPs if HTTPS is configured on the origin server?

• Do I need to renew the SSL certificate in Alibaba Cloud CDN after an origin server renews its SSL certificate?

API reference