All Products
Search

This Product

    Certificate Management Service:Certificate toolkit

    Document Center

    Certificate Management Service:Certificate toolkit

    Last Updated:Jun 02, 2026

    The certificate toolkit lets you view CSR and certificate details, check SSL status, convert certificate formats, and validate DNS resolution.

    The toolkit includes:

    • View CSR: View the domain, algorithm, and other details in a CSR.

    • View Certificate: View the domain, algorithm, validity, and other details of an SSL certificate.

    • SSL Status Check: Check the SSL certificate status, chain, and supported protocols for a domain.

    • Certificate Format Conversion: Convert certificates between different formats (PEM, PFX, JKS, PKCS8).

    • DNS Validation: Verify whether DNS resolution for a domain has taken effect.

    • Chinese Domain Name Conversion: Convert Chinese domain names to Punycode.

    View CSR details

    When you submit a certificate application to a CA, you must provide a CSR (Certificate Signing Request) . Use the View CSR tool to verify the domain, algorithm, and other CSR details before applying. This prevents issuance failures caused by domain mismatches between the application and the CSR.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > View Certificate CSR.

    3. On the View Certificate CSR page, upload a CSR file or enter the CSR content in the text box, and then click View CSR.

      The CSR content starts with -----BEGIN CERTIFICATE REQUEST----- and ends with -----END CERTIFICATE REQUEST-----. Ensure the uploaded file or entered content uses the correct encoding format.

    View certificate details

    Use the View Certificate tool to review the domain, algorithm, validity, and other key details of a certificate before deployment.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > View Certificate Content.

    3. On the View Certificate Content page, upload a certificate file or enter the certificate content in the text box, and then click View Certificate.

      The certificate content starts with -----BEGIN CERTIFICATE----- and ends with -----END CERTIFICATE-----. Ensure the uploaded file or entered content uses the correct encoding format.

    Check SSL status for a domain

    Use the SSL Status Check tool to view the active SSL certificate details, certificate chain, and supported protocols for a domain.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > Check Domain Name Status.

    3. On the Check Domain Name Status page, enter the domain name and port that you want to check, and then click Check.

    Convert certificate formats

    Web servers require specific certificate formats. Convert your issued certificate to the required format before installation. Certificate Management Service provides a format conversion tool that supports conversions between PEM and PFX, PEM and JKS, and PEM and PKCS8.

    Note

    To convert between CER and CRT formats, rename the file extension directly.

    You can set a protection password for the converted certificate. For PEM-to-JKS conversions, you can also set a certificate alias.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > Convert Certificate Format.

    3. On the Convert Certificate Format page, configure the settings as prompted, and then click Submit.

      Important

      • If your original certificate has an alias or protection password, enter these values in the corresponding fields. Otherwise, the conversion fails.

      • To manually enter certificate or private key content, open the file in a text editor and paste the content into the corresponding text box.

    DNS validation

    Verify whether DNS resolution for your domain has taken effect.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > Verify DNS Settings.

    3. On the Verify DNS Settings tab, select the carrier and region of your domain name, enter your website domain name, and then click Verify.

      If the resolution result matches the record value in your DNS configuration, DNS resolution is working properly.

    Chinese domain name conversion

    Per RFC 3492, Chinese domain names must be converted to Punycode for Internet recognition. Convert your Chinese domain to Punycode before applying for an SSL certificate.

    1. Log in to the Certificate Management Service console.

    2. In the navigation pane on the left, choose Common Certificate Tools > Convert Chinese Domain Name.

    3. Enter your Chinese domain name and click Convert to Punycode.

      After conversion, the domain appears in Punycode format (xn-xxxxxxxx.xxx). To convert back, click Convert to GBK.