Dynamic Route for CDN (DCDN) supports HTTPS secure acceleration. You can upload a custom certificate or add a purchased certificate from SSL Certificates Service to DCDN to enable HTTPS secure acceleration. HTTPS secure acceleration implements encryption for data in transit. This topic describes how to configure and renew an SSL certificate.
Prerequisites
- An SSL certificate is prepared. If you want to purchase an SSL certificate, you can log on to the SSL Certificates Service console to apply for a free certificate or purchase a certificate from a certificate authority (CA).
- If you want to use a custom certificate, it must be in a valid format. For more information, see Certificate formats.
Background information
SSL certificates are classified into different types based on vetting and verification requirements. Different types provide different levels of security and are suitable for different websites. For more information, see Supported certificate types.
PEM
format. If a certificate is not in the PEM
format, convert the certificate to the PEM
format. For more information, see Convert certificate formats.
- The CRT file extension is short for certificate. The certificate may be in PEM or Distinguished Encoding Rules (DER) format. Before you convert the format of a certificate, check whether the certificate needs to be converted into other formats.
- PEM is a text format. It starts with " -----BEGIN ***-----" and ends with "-----END
***-----". The content between these lines is encoded in Base64. Both the certificate
and private key can be saved in this format. To distinguish a certificate from a private
key, the extension of a private key file that is in PEM format is
.key
.
Step 1: Configure or renew an SSL certificate
HTTPS secure acceleration is a value-added service. After you enable HTTPS, you are charged based on the number of HTTPS requests. You cannot use DCDN data transfer plans to offset the fees. For more information about HTTPS pricing, see Billing of requests and WebSocket.
Step 2: Check whether HTTPS takes effect

Step 3: Disable HTTPS secure acceleration
If you no longer require HTTPS secure acceleration, you can disable this feature in the DCDN console at any time. HTTPS secure acceleration is disabled immediately after you turn off the switch.