Configure HTTPS certificates in batches

Configure or update an HTTPS certificate

1. Log on to the CDN console.

2. In the left navigation pane, click HTTPS Center.

3. On the Certificate Center page, click Add Certificate.

4. Select a certificate.

   1. In the Add Certificate panel, configure the certificate parameters.

      Parameter	Description
      Certificate Source	Only certificates obtained from Certificate Management Service are supported. That is, certificates purchased from Alibaba Cloud Certificate Management Service (formerly SSL Certificates Service).
      Certificate Name	Select the certificate that you purchased.
      Certificate (Public Key)	The PEM-encoded content of the certificate public key. For certificates obtained from Certificate Management Service, the content is automatically retrieved by the system.
      Private Key	The PEM-encoded content of the certificate private key. For certificates obtained from Certificate Management Service, the content is automatically retrieved by the system.

   2. Click Next.

5. Select the domain names that match the certificate.

   Important

   If a selected domain name already has a certificate deployed, this operation overwrites the existing certificate.

   Certificates from Certificate Management Service can be deployed and updated in batches based on the association between certificates and domain names.

   In the Associated Domain Names step, you can filter domain names by All Domain Names, Only Domain Names Without Certificates, or Only Domain Names With Certificates, and select Exact Match or Fuzzy Match as the matching rule. Select the target domain names from the Domain Name List on the left, click the right arrow to add them to the Selected list on the right, and then click OK to associate the certificate with the domain names.

6. Click OK to deploy and update the certificate.

7. (Optional) To enable end-to-end data transfer over HTTPS, configure CDN nodes to use HTTPS for origin fetch to the origin server. The origin server must support HTTPS. For more information, see Configure the origin protocol policy.

Verify the HTTPS configuration

Browser verification: Use a browser to access https://<your accelerated domain name>. If a lock icon appears in the address bar and clicking it displays the correct certificate information, the configuration is successful. Command-line verification: Run curl -I https://<your accelerated domain name>. If a 200 status code is returned, the HTTPS service is available.

View configured HTTPS certificate information

Log on to the Alibaba Cloud CDN console, choose HTTPS Center in the left-side navigation pane, and click the domain name for which a certificate is configured to view the HTTPS certificate information of the domain name.

Because private key information is sensitive, the console does not allow you to view the private key. Keep your certificate information properly stored. For other certificate-related FAQs, see More certificate FAQs.

Related API operations