After an SSL certificate is issued, you can append new domain names to the certificate or change the bound domain names. Appending domain names applies when you need a single certificate to protect multiple domain names. Changing domain names applies when the certificate has been issued for more than 28 calendar days (beyond the revocation period) and you still need to change the bound domain names. This topic describes how to append or change domain names.
SSL Certificate Management V2.0 does not currently support appending or changing domain names. Please follow product updates for future availability. For more information, see Version change summary.
Append domain names
Appending domain names adds new domain names to an issued SSL certificate. This applies when you need a single certificate to protect multiple domain names.
Appending domain names is equivalent to purchasing a new certificate, and additional fees are required. The actual fees are displayed on the purchase page. After you append domain names, neither the original certificate nor the certificate with appended domain names supports refunds.
Prerequisites
-
Your SSL certificate is a paid certificate purchased from Alibaba Cloud, issued by GlobalSign, DigiCert, Rapid, GeoTrust, or CFCA, and the certificate has been issued.
-
EV and OV certificates: Support appending custom domain names. OV certificates support appending single domain names and wildcard domain names. EV certificates support appending single domain names only.
-
DV certificates: Do not support appending custom domain names. However, if your domain name is a second-level or higher domain name, you can append a www domain name for free. For example, if the domain name is doc.example.com, you can append www.doc.example.com for free.
-
-
Your SSL certificate does not have the managed service enabled. To append domain names to a managed SSL certificate, cancel the managed service first. For more information, see Cancel hosting.
Procedure
Log in to the Certificate Management Service console.
-
In the left-side navigation pane, choose Certificate Management > SSL Certificate Management (V1.0 Discontinued).
-
On the Commercial Certificates tab, find the target certificate, and in the Actions column, click More.
-
On the Append Domain Name tab, select the domain names to append, select the Note check box, and click OK.
-
In the dialog box that appears, click Submit.
After you submit the request to append domain names, the system sends a review email. Check your inbox. After the review is approved, find the target certificate in the SSL certificate list and view the appended domain names in the Bound Domains column.
After domain names are appended, if the original certificate is revoked and becomes unavailable, you must reinstall the new certificate issued with the appended domain names. For more information, see Deploy a certificate.
Change domain names
Changing domain names replaces the domain names bound to an issued SSL certificate with new domain names. This applies when the certificate has been issued for more than 28 calendar days (beyond the revocation period) and you still need to change the domain names.
Changing domain names is equivalent to purchasing a new certificate, and additional fees are required. The actual fees are displayed on the purchase page. After the domain names are changed, neither the original certificate nor the new certificate supports refunds.
-
If changing domain names fails (the review is not approved), Alibaba Cloud automatically cancels the domain name change order and refunds the fees through the original payment method.
-
If changing domain names succeeds, the new certificate has the same validity period as the original certificate. For example, if the original certificate expires on December 31, 2022, the new certificate also expires on December 31, 2022.
Prerequisites
-
Your SSL certificate is a paid certificate purchased from Alibaba Cloud, issued by GlobalSign, DigiCert, GeoTrust, or CFCA, and the certificate has been issued.
ImportantGlobalSign certificates do not support changing to a first-level domain name. For example, if the certificate is bound to doc.example.com, you cannot change it to the first-level domain name example.com.
-
The SSL certificate must have been issued for more than 30 calendar days.
Find the target certificate in the SSL certificate list, click More in the Actions column, and view the certificate issuance date on the Details tab.
-
Your SSL certificate does not have the managed service enabled. To change domain names for a managed SSL certificate, cancel the managed service first. For more information, see Cancel hosting.
Procedure
Log in to the Certificate Management Service console.
-
In the left-side navigation pane, choose Certificate Management > SSL Certificate Management (V1.0 Discontinued).
-
On the Commercial Certificates tab, find the target certificate, and in the Actions column, click More.
-
On the Change Domain Name tab, select the domain names to change, enter the new domain names, select the Note check box, and click OK.
ImportantThe new domain name must have the same specification as the domain name being replaced. For example, if the domain name being replaced is a wildcard domain name such as *.aliyun.com, the new domain name must also be a wildcard domain name, such as *.taobao.com.
-
In the dialog box that appears, click Submit.
After you submit the request to change domain names, Alibaba Cloud reviews your request. After the review is approved, Alibaba Cloud issues a new certificate to replace the old one.
After the domain names are changed, the old certificate is revoked. You must reinstall the new certificate. For more information, see Deploy a certificate.
Related documentation
-
For the SSL certificate deployment guide, see Deploy a certificate
-
If you encounter issues, consult a technical expert. For more information, see One-on-one expert service.