By default, Certificate Management Service sends a single expiration reminder 30 days before a certificate expires, to one contact, by email or internal message only. A custom notification policy removes these restrictions: add up to 10 contacts, use chatbot delivery channels, adjust the reminder lead time, set repeat frequency, and receive alerts for certificate lifecycle events beyond expiration.
Default vs. custom notification policy
| Item | Default policy | Custom policy |
|---|---|---|
| Contacts | 1 | Up to 10 |
| Delivery channels | Email, internal message | Email, internal message, DingTalk/WeCom/Lark |
| Delivery window | All day | All day, or 09:00–20:00 |
| Expiration reminder lead time | 30 days before expiration (fixed) | 30, 60, or 90 days before expiration |
| Reminder frequency | Once only (fixed) | Once, or every 1/3/5/7 days |
| Notification types | Expiration only | Business events, alerts, and service changes (see below) |
Notification types in a custom policy
Business notifications cover certificate lifecycle events:
Certificate expiration notification
Certificate download notification
Certificate revocation notification
Certificate deletion notification
Certificate sharing notification
Certificate hosting notification
Alert notifications flag conditions that need immediate attention:
Alert notification for certificates that expire and are not renewed
Alert notification for disabling notifications
Alert notification for hosting failures
Service change notifications keep you informed about Certificate Management Service updates, announcements, upgrades, and changes to intermediate certificates and root certificates.
Prerequisites
Before you begin, ensure that you have:
An issued certificate in Certificate Management Service. See Purchase SSL certificates and Apply for a certificate
(For uploaded certificates only) A purchased notification quota. See Purchase the quota for notification
At least one contact with a configured delivery channel. To use DingTalk, WeCom, or Lark, add a webhook URL to the contact first. See Manage contacts
Configure notification settings
Log on to the Certificate Management Service console.
In the left-side navigation pane, choose Certificate and Domain Application Services > Notification.
On the SSL Certificates page, find the target certificate and click Edit in the Actions column.
To configure multiple certificates at once, select them and click Batch Edit below the list.
In the Edit Notification panel, turn on Notification Switch, set the following parameters, and click OK.
Parameter Description Alert Contact Select up to 10 notification contacts. Notification Method Select one or more delivery channels: Email Address, Internal Message, or DingTalk/WeCom/Lark. For chatbot delivery, the selected contact must have a webhook URL configured on the Contact Management page. Notification Content Select the notification types to receive: Business Notification, Alert Notification, and/or Product Change. Expiration Notification Frequency Select how often to resend expiration reminders: once, or every 1, 3, 5, or 7 days. Expiration Deadline Notification Select how far in advance to start sending reminders: 30, 60, or 90 days before expiration.