[Storage] Use AliCloud free certificates that are automatically renewed to avoid expiration of AliCloud CDN domain certificates
Free Certificates
This article is about to use Aliyun (AliCloud) / Alibaba Cloud free certificates that are automatically renewed to avoid expiration of Aliyun (AliCloud) / Alibaba Cloud Content Delivery Network (CDN) domain certificates.
Alibaba Cloud Content Delivery Network (CDN)
CDN: Content Delivery Service for Accelerated Distribution of Content - Alibaba Cloud - https://www.alibabacloud.com/product/cdn is a distributed network built over the bearer network and contains edge nodes deployed in different regions. Alibaba Cloud CDN offloads network traffic from origin servers to prevent network congestion. You can use Alibaba Cloud CDN to accelerate website content delivery in different regions or scenarios.
Configuration
-
Log in to the CDN console - https://cdn.console.aliyun.com/domain/list.
-
In the left navigation bar, click Domain Management.
-
On the domain name management page, click the management corresponding to the target domain name.
-
In the left navigation bar of the specified domain name, click HTTPS configuration.
-
In the HTTPS certificate area, click Modify Configuration.
-
On the HTTPS setting interface, turn on the HTTPS security acceleration switch and configure the certificate-related parameters.
Limits
Free certificates are usually issued within 1 to 2 working days. During the waiting period, you can also choose to upload a custom certificate or Cloud Shield certificate again.
Note According to the CA Center’s review process, the certificate you applied for may be issued within a few hours, or it may take 2 working days to complete the issuance. This is a normal phenomenon. Please wait patiently.
The free certificate is only applicable to the HTTPS security acceleration business, so you cannot manage the certificate on the Alibaba Cloud Cloud YunDun console, nor can you view the public key and private key.
The free certificate is valid for one year. During your use, if you turn off the HTTPS security acceleration, when you turn on the free certificate again, the certificate that has been applied for but has not expired will be used directly. If the certificate has expired when it is turned on, you need to apply for a free certificate again.
HTTPS secure acceleration is a value-added feature and is charged in addition to CDN traffic. After you enable this feature, you are charged for all HTTPS requests. You can either pay for each individual HTTPS request or purchase a HTTPS request plan. To avoid business interruption, make sure that your account balance is sufficient to cover all fees. For more information, seeHTTPS pricing.
Wildcard domains do not support free certificates.
If your website has user information and transactions, we recommend that you use a certificate with a higher security level.
References
[1] 配置HTTPS证书 - CDN - 阿里云 - https://help.aliyun.com/document_detail/27118.html