証明書ツールキットでは、CSR と証明書の詳細の表示、SSL ステータスチェック、証明書フォーマットの変換、DNS 名前解決の検証ができます。
The toolkit includes:
View CSR: View the domain, algorithm, and other details in a CSR.
View Certificate: View the domain, algorithm, validity, and other details of an SSL certificate.
SSL Status Check: Check the SSL certificate status, chain, and supported protocols for a domain.
Certificate Format Conversion: Convert certificates between different formats (PEM, PFX, JKS, PKCS8).
DNS Validation: Verify whether DNS resolution for a domain has taken effect.
Chinese Domain Name Conversion: Convert Chinese domain names to Punycode.
View CSR details
When you submit a certificate application to a CA, you must provide a CSR (Certificate Signing Request) . Use the View CSR tool to verify the domain, algorithm, and other CSR details before applying. This prevents issuance failures caused by domain mismatches between the application and the CSR.
Certificate Management Service コンソール にログインします。
左側のナビゲーションウィンドウで、 を選択します。
On the [証明書 CSR の表示] page, upload a CSR file or enter the CSR content in the text box, and then click [CSR の表示].
The CSR content starts with
-----BEGIN CERTIFICATE REQUEST-----and ends with-----END CERTIFICATE REQUEST-----. Ensure the uploaded file or entered content uses the correct encoding format.
View certificate details
Use the View Certificate tool to review the domain, algorithm, validity, and other key details of a certificate before deployment.
Certificate Management Service コンソール にログインします。
左側のナビゲーションウィンドウで、 を選択します。
On the [証明書の内容を表示する] page, upload a certificate file or enter the certificate content in the text box, and then click [証明書の表示].
The certificate content starts with
-----BEGIN CERTIFICATE-----and ends with-----END CERTIFICATE-----. Ensure the uploaded file or entered content uses the correct encoding format.
Check SSL status for a domain
Use the SSL Status Check tool to view the active SSL certificate details, certificate chain, and supported protocols for a domain.
Certificate Management Service コンソール にログインします。
左側のナビゲーションウィンドウで、 を選択します。
On the [ドメインステータスのチェック] page, enter the domain name and port that you want to check, and then click [検出].
Convert certificate formats
Web servers require specific certificate formats. Convert your issued certificate to the required format before installation. Certificate Management Service provides a format conversion tool that supports conversions between PEM and PFX, PEM and JKS, and PEM and PKCS8.
To convert between CER and CRT formats, rename the file extension directly.
You can set a protection password for the converted certificate. For PEM-to-JKS conversions, you can also set a certificate alias.
Certificate Management Service コンソール にログインします。
On the [証明書形式の変換] page, configure the settings as prompted, and then click [送信].
重要If your original certificate has an alias or protection password, enter these values in the corresponding fields. Otherwise, the conversion fails. If information such as aliases or certificate protection passwords is not included, leave the corresponding configuration fields empty.
To manually enter certificate or private key content, open the file in a text editor and paste the content into the corresponding text box.
DNS validation
Verify whether DNS resolution for your domain has taken effect.
Certificate Management Service コンソール にログインします。
左側のナビゲーションウィンドウで、 を選択します。
On the [DNS 発効検証] tab, select the carrier and region of your domain name, enter your website domain name, and then click [検証].
If the resolution result matches the record value in your DNS configuration, DNS resolution is working properly.
Chinese domain name conversion
Per RFC 3492, Chinese domain names must be converted to Punycode for Internet recognition. Convert your Chinese domain to Punycode before applying for an SSL certificate.
Certificate Management Service コンソール にログインします。
左側のナビゲーションウィンドウで、 を選択します。
Enter your Chinese domain name and click [トランスコード (Punycode に変換)].
After conversion, the domain appears in Punycode format (
xn-xxxxxxxx.xxx). To convert back, click [デコード (GBK に変換)].