After you pay for a certificate renewal, a new certificate appears in the console — but it is not active yet. You still need to submit an application, pass CA verification, and download and install the new certificate before it takes effect.
How it works
Renewal is a two-stage process:
Purchase — Click Renewal purchase (available within 30 calendar days before the certificate expires). The new certificate appears below the original certificate in the console. The
icon to the left of the new certificate indicates it is linked to the original. The original certificate's validity period is not affected.Application — The new certificate starts in the Pending Application state. Purchase alone does not activate the certificate. Follow the steps below to complete the process.
Apply for and download the renewed certificate
Step 1: Submit a certificate application.
The new certificate requires a separate application. Submit the required information and cooperate with the certificate authority (CA) to complete domain name ownership verification and the review of application materials. For detailed steps, see Submit a certificate application.
Step 2: Wait for CA approval and certificate issuance.
After the CA approves your application, it issues the certificate.
Step 3: Download and install the certificate.
Once the certificate is issued, download it based on your server type. To identify your server type, see How do I view the type of a server?. For download and installation instructions, see Installation overview.