Whether a domain certificate is issued automatically or requires manual DNS validation depends on your DNS configuration. If your domain uses Alibaba Cloud DNS, the system handles the entire issuance process — no manual steps required. If your domain uses a third-party DNS provider, you must transfer your DNS service to Alibaba Cloud to enable automatic issuance.
Automatic issuance
Automatic issuance is available in the Domain Name Service console. When all of the following prerequisites are met, the system adds the required DNS validation records and completes the issuance without any manual steps.
Prerequisites:
Before the system can issue your certificate automatically, ensure that you have:
A domain name registered with Alibaba Cloud
Alibaba Cloud DNS configured as the DNS provider for the domain
If your domain name does not use Alibaba Cloud DNS, certificates cannot be automatically issued. If you cannot configure DNS records, you can transfer your DNS service to Alibaba Cloud. This authorizes the system to automatically add the required DNS validation records and complete the issuance. Alternatively, go to the Alibaba Cloud Certificate Management Service console to purchase a paid DV certificate. Then, follow the DNS validation instructions in the console. You will need to go to your third-party DNS provider's console and add the specified TXT record to prove that you have control over the domain name. The certificate can be issued after the record is verified.
Identity verification completed for the domain
An active, unexpired domain name
Free certificates
- To issue a free certificate, both your domain name and DNS service must be hosted by Alibaba Cloud.
The Alibaba Cloud platform offers free certificates for individual users and for testing purposes. For a seamless automated issuance experience, you must migrate your domain names to Alibaba Cloud and use Cloud DNS.
- Free certificates are not covered by a Service-Level Agreement (SLA). We recommend that you purchase paid certificates for commercial websites.
Domains not using Alibaba Cloud DNS
Automatic issuance is not available for domains that use a third-party DNS provider. To enable automatic issuance, transfer your DNS service to Alibaba Cloud. After the transfer, the system can add DNS validation records automatically and complete issuance on your behalf.