Certificate Management Service

You can use Certificate Management Service to issue, deploy, and manage public and private SSL/TLS certificates.

Latest Updates

Announcements and Updates

[Announcement] Update of DigiCert root certificates

Learn more >
New Features

30-day free trial of the Private Certificate Authority (PCA) service

Learn more >

Convenient, Secure, and Reliable Certificate Solution

SSL certificates provide a secure and trusted method to encrypt communications, verify identities, protect data integrity, and establish trust relationships between communicating parties. SSL certificates are an important tool used to protect sensitive information and meet security requirements.

Alibaba Cloud Certificate Management Service is a software as a service (SaaS) solution that integrates SSL certificate lifecycle management on the cloud and SSL certificate deployment. Certificate Management Service can issue and manage server certificates and end-entity certificates. Certificate Management Service also provides a solution for automated certificate deployment on the cloud. This way, you can implement data transmission encryption and source encryption to ensure data security in a convenient manner.

Scenarios

HTTPS Encryption for Websites, Apps, and Mini Programs

HTTP websites are prone to data theft. HTTP websites do not meet the security authentication requirements of browsers and are marked as insecure upon access to the websites. As a result, users cannot access the websites, and related apps or mini programs cannot be published. This affects business development. If a web page is protected by an SSL certificate, a green address bar is displayed in a browser, and a lock icon and the https prefix are displayed in the address bar.

Identity Authentication
SSL is critical for meeting Payment Card Industry Data Security Standard (PCI DSS) requirements. When a user accesses a website, the user checks the identity information of the certificate holder to determine the authenticity of the website. You can use certificates to protect websites and block cyber harassment attacks, phishing websites, and man-in-the-middle attacks. This also improves the search engine rankings of websites.
Anti-tamper and Anti-leak
During data transmission, encrypted connections are established to ensure the confidentiality of transmitted data. This also protects account security and prevents data from being tampered with or leaked.
Improved Search Engine Rankings
You can use certificates to improve the trust level of your website, improve user experience, accelerate page loading, and optimize mobile device experience. This helps the website achieve a higher search engine ranking.

Recommend Services: Alibaba Cloud CDN (CDN) > Web Application Firewall (WAF) >

Two-way Authentication

Web applications may encounter the following issues: traffic attacks launched by illegal clients, untrusted clients, and unsecure and unreliable data transmission in B2B services. Some industries and organizations need to comply with special regulations on data confidentiality and protection, and use SSL certificates to meet security and compliance requirements.

Meet Requirements for Two-way SSL Authentication
Two-way SSL authentication helps ensure that both identities of a connection are trusted and prevents man-in-the-middle attacks. For example, two-way SSL authentication is required for remote procedure call (RPC) connections and IoT devices.
Improve Server-side Traffic Security
Two-way authentication helps block access from untrusted clients and improve server-side traffic security.

Recommend Services: Private Certificate Authority (PCA) >

Portfolio of Certificate Management Service

Alibaba DV SSL
Support for single-domain certificates and wildcard certificates
Automatic verification without manual review
From $ 99 /Year
GlobalSign OV SSL
Support for issuance of single-domain certificates, wildcard certificates, multi-domain certificates, hybrid certificates, and certificates bound with public IP addresses one by one, and also support for issuance of combined certificates
Quick deployment to WAF, Application Load Balancer (ALB), and Network Load Balancer (NLB)
From $ 349 /Year
DigiCert OV/EV SSL
Certificates of Secure Site series, preferentially verified
Up to USD 1.75 million warranty
From $ 484 /Year
Private Certifcate Authroity(PCA)
Support for creation of different certificates and CAs to identify and protect resources within enterprises, such as applications, users, and devices
Support for API calls
From $ 760 /Month
Alibaba DV SSL
Support for single-domain certificates and wildcard certificates
Automatic verification without manual review
From $ 99 /Year
GlobalSign OV SSL
Support for issuance of single-domain certificates, wildcard certificates, multi-domain certificates, hybrid certificates, and certificates bound with public IP addresses one by one, and also support for issuance of combined certificates
Quick deployment to WAF, Application Load Balancer (ALB), and Network Load Balancer (NLB)
From $ 349 /Year
DigiCert OV/EV SSL
Certificates of Secure Site series, preferentially verified
Up to USD 1.75 million warranty
From $ 484 /Year
Private Certifcate Authroity(PCA)
Support for creation of different certificates and CAs to identify and protect resources within enterprises, such as applications, users, and devices
Support for API calls
From $ 760 /Month

Benefits

Certification in Compliance with CA/B Forum Standards, and Direct Purchase from CAs

Certificate applications are submitted for approval to global leading CAs, such as DigiCert and GlobalSign. This way, SSL certificates that have high security, trust levels, and reliability are issued.

Automated Management

Certificate Management Service provides the automated certificate management feature. The feature automatically detects and renews certificates that are about to expire, monitors the status of certificates in real time, and supports alerting.

7-day Money-Back Guarantee

After you place a purchase order, you are eligible for a 7-day money-back guarantee if you do not submit a certificate application.

Quick Deployment to Cloud Services

You can log on to the Certificate Management Service console to deploy certificates to cloud services such as WAF, ALB, and NLB with a few clicks. Certificate Management Service is developing support for more cloud services.

Various API Operations

You can call API operations for full-lifecycle certificate management, including certificate purchase, application, issuance, download, and upload. The API operations help automate certificate management and improve efficiency and flexibility.

Tools

Certificate Management Service provides free features, including SSL certificate format conversion and certificate status detection. You can use the same certificate on different systems and devices, learn about the status of a certificate at the earliest opportunity, and implement necessary measures.

phone Contact Us