Certificate Management Service:FAQ

Pre-sales FAQ about SSL certificates

• What are a public key and a private key?

• How does Certificate Management Service protect private keys?

• What are differences between HTTPS and HTTP?

• What are common formats of SSL certificates?

• What kinds of domain names are supported by wildcard certificates?

• Which websites must have HTTPS encryption enabled?

• Can I apply for multiple SSL certificates for a domain name?

• What are the differences between the RSA and ECC encryption algorithms?

• Keys without password protection

FAQ about certificate purchase, renewal, and refund

• What are the differences between a renewed certificate and a purchased certificate?

• How do I change a single-domain certificate that is purchased or issued to a wildcard certificate?

• When I request a refund for a certificate order, the system prompts that the refund period of the order elapses or the remaining quota in the order is insufficient. Why?

• What do I do when my SSL certificate is about to expire?

• How do I renew my certificate?

• When I purchase a certificate, an error message that indicates an activation failure is returned. What do I do?

FAQ about certificate application and approval

• FAQ about verification of domain name ownership

• How do I select a method for domain name ownership verification?

• What do I do if my certificate remains in the Validating Application state after the certificate application is submitted for a long period of time?

• What are the possible reasons and solutions for certificate validation failures?

• What information is required to apply for a paid certificate?

• How do I select a certificate type, certificate brand, and domain name type?

• How do I apply for multi-domain certificates or hybrid certificates?

• How do I specify domain names that I want to bind to a certificate?

• If the IP address of a server is changed, can I still use the certificate that originally protects the server?

• Why does the status of my certificate order remain unchanged after I receive a notification from the CA?

• What are the considerations when I apply for a certificate for a domain name?

• Is the certificate quota affected after I cancel a certificate application?

• How do I apply for and download a certificate after certificate renewal?

• After I cancel my certificate application, an error message is returned, which indicates that an error occurred during page loading. What do I do?

• What are the considerations for domain names if I want to apply for a certificate?

• My domain name fails the security audit, and an error message is returned, which indicates a failure to apply for a free DV certificate. What do I do?

• How do I create a CSR file?

• When I upload my CSR file, an error message is returned, which indicates that an approval failure occurred due to the absence of the primary domain name. What do I do?

• The configurations to verify domain name ownership failed to be pushed to Alibaba Cloud DNS. What do I do?

• What are the possible reasons and solutions for certificate approval failures?

FAQ about certificate installation

• After I install a certificate on a website, the certificate does not take effect or the website is reported as insecure when I access the website. What do I do?

• How do I troubleshoot the issue that the certificate chain of a website is incomplete?

• How do I select and configure a certificate to support Apple ATS?

• How do I set the TLS version of my certificate?

• How do I convert the format of a certificate?

• How do I view the type of a server?

• I use Mozilla Firefox to access a website that has a certificate installed. Why is the website reported as not secure?

• How do I install the mod_ssl.so module on an Apache server?

• What do I do if the AH00526 error is reported when I restart the Apache service after I install an SSL certificate on an Apache server?

• Do I need to reconfigure a root certificate after my SSL certificate expires?

• The "sun.security.validator.ValidatorException: PKIX path building failed" error is reported. What do I do?

• Can I install a single-domain SSL certificate on multiple servers?

• The IIS service is inaccessible from Google Chrome after a certificate is installed. What do I do?

• Website access from Google Chrome failed when website domain names are used for access. What do I do?

• I have installed a certificate on an IIS server, but a 404 error is returned when I access the server. Why?

• How do I check whether my certificate takes effect on browsers?

• Multiple websites are associated with the same IP address and port of a server. However, when I access the websites, the system prompts that the certificate does not match. What do I do?

• The ERR_CERTIFICATE_TRANSPARENCY_REQUIRED error is returned by Google Chrome. What do I do?

• The IIS service is inaccessible from Google Chrome after a certificate is installed. What do I do?

FAQ about certificate management

• How do I view SSL certificate-related operation records within the current Alibaba Cloud account?

• What are the limits on appending domain names to a certificate?

• How do I change the display name of a certificate?

• How do I obtain the webhook URL of a DingTalk chatbot?

• Are my certificates affected if I change the enterprise real-name information?

• What are the impacts if I do not renew my certificate after it expires?

FAQ about private certificates

FAQ about PCA:

• Which types of certificates does Matter use?

• How do I install the chain of trust for a private certificate in Google Chrome?