You can modify an issued SSL certificate by appending new domain names or changing existing ones. Appending a domain is ideal for expanding the coverage of a multi-domain certificate. Changing a domain is useful when you need to replace a domain on a certificate that is past its 28-day free revocation and reissue period. This topic describes how to append a domain name to a certificate and how to change a domain name that is bound to a certificate.
Append a domain name
If you use an issued certificate, you can append domain names to the certificate to protect multiple domain names.
The operation that appends a domain name to a certificate is equivalent to the operation that purchases a new certificate. Therefore, you must pay for the appending operation. The actual prices on the buy page shall prevail. After you append a domain name to a certificate, you cannot request a refund for the original certificate or the new certificate.
Prerequisites
The certificate is an official certificate that is purchased from Alibaba Cloud Certificate Management Service and is issued by GlobalSign.
Extended validation (EV) or organization validated (OV) certificate: You can append a custom domain name to an EV or OV certificate. For OV certificates, you can append domain names to single-domain or wildcard certificates. For EV certificates, you can append domain names to only single-domain certificates.
Domain validated (DV) certificate: You cannot append a custom domain name to a DV certificate. However, if your certificate is for a second-level domain or higher (such as doc.example.com), you can append its corresponding www subdomain (www.doc.example.com) free of charge.
Hosting is disabled for the certificate. If you want to append a domain name to a certificate that is hosted, you must first cancel hosting for the certificate.
Procedure
Log on to the Certificate Management Service console.
In the left-side navigation pane, choose .
On the Official Certificate tab, find the certificate that you want to manage and click More in the Actions column.
On the page that appears, click the Append Domain Name tab, select the domain name that you want to append to the certificate, read and select Note, and then click OK.
In the message that appears, click Submit.
After you submit an application for appending a domain name, Alibaba Cloud sends you a review email. We recommend that you check your emails. After the application is approved, you can perform the following operations to view the appended domain name: Go to the certificate list, find the certificate, and view the value in the Bound Domains column.
After the domain is appended and the new certificate is issued, the original certificate is revoked. You must install the new certificate on your server.
Change a domain name
Changing a domain name allows you to replace a domain on an issued certificate. This is typically used for certificates that are older than 28 days and are no longer eligible for a free reissue, as revoking them does not return the certificate quota.
The operation that changes a domain name bound to a certificate is equivalent to the operation that purchases a new certificate. Therefore, you must pay for the change operation. The actual prices on the buy page shall prevail. After you change a domain name bound to a certificate, you cannot request a refund for the original certificate or the new certificate.
If a domain name fails to be changed because your application for changing the domain name is rejected, Alibaba Cloud automatically cancels the change order of the domain name, and you can receive a refund in the account that you used to pay for the order.
If a domain name is successfully changed, the validity period of the new certificate is the same as the validity period of the original certificate. For example, before a domain name is changed, the original certificate expires on December 31, 2022. After the domain name is changed, the new certificate still expires on December 31, 2022.
Prerequisites
The certificate is an official certificate that is purchased from Alibaba Cloud Certificate Management Service and is issued by GlobalSign.
ImportantFor GlobalSign certificates, you cannot change a subdomain to its primary domain. For example, you cannot change doc.example.com to example.com.
The certificate is issued more than 30 calendar days ago.
To view the issuance time of a certificate, perform the following operations: In the certificate list, find the certificate and click More in the Actions column. On the Details tab, view the issuance time of the certificate.
Hosting is disabled for the certificate. If you want to change a domain name that is bound to a hosted certificate, you must first cancel hosting for the certificate.
Procedure
Log on to the Certificate Management Service console.
In the left-side navigation pane, choose .
On the Official Certificate tab, find the certificate that you want to manage and click More in the Actions column.
On the page that appears, click the Change Domain Name tab, select the domain name that you want to change, enter a new domain name, read and select Note, and then click OK.
ImportantThe specifications of the new domain name must be the same as the specifications of the original domain name. For example, if the original domain name is a wildcard domain name such as *.aliyun.com, you can enter only a different wildcard domain name such as *.taobao.com.
In the message that appears, click Submit.
After you submit an application for changing a domain name, Alibaba Cloud reviews your application. After Alibaba Cloud approves the application, Alibaba Cloud applies for a new certificate to replace the original certificate.
After the domain name is successfully changed, the original certificate is revoked, and you must install the new certificate.
References
For more information about how to install a certificate, see Deploy SSL certificates.