Help Center> SSL Certificate Manager> FAQ> Certificate Validity Period> How Can I Renew an SSL Certificate?
View PDF

How Can I Renew an SSL Certificate?

An SSL certificate is a one-time product and has a validity period. An expired certificate is invalid. You can renew a certificate before it expires. For details, see Renewing an SSL Certificate.

SCM will notify you of certificate expiration 30 days before the certificate expires.

  • For certificates you purchase through SCM, SCM automatically notifies you of the expiration by email and SMS two months, one month, and one week before a certificate expires and again when the certificate actually expired.
  • You need to configure an expiration reminder for uploaded certificate so that the system can send emails and SMS messages to notify you of the certificate expiration. For details, see How Do I Configure a Certificate Expiration Notification?

After purchasing or renewing an SSL certificate, you need to submit an application to the CA for approval. You will obtain the new certificate after the CA approves your application. For the new certificate to take over the job, install it on your server to replace the old one, or replace the old one in the cloud service with the new one.

The certificate can be replaced immediately after a new certificate is issued. The replacement does not affect services.

  • You are advised to purchase or renew an SSL certificate at least three to ten working days before the current one expires.
  • DigiCert, GlobalSign, and GeoTrust are available CAs in HUAWEI CLOUD SCM. You can request a new certificate 90 days before the current one expires.

    If the certificate details remain unchanged, the actual validity period of the new certificate equals to the remaining validity period of the original one plus the requested validity period of the new one. A maximum of 30 days can be counted towards the validity period of the new certificate. You are advised to apply for a certificate 30 days before the original one expires.

    For example, if your current certificate expires on October 1, 2019. You request a new one-year SSL certificate with the same details from the same CA on August 31, 2019. If the new certificate is issued on Sept. 1, 2019, it will be valid from Sept. 1, 2019 to Sept. 30, 2020.

    This rule is formulated, interpreted, and clarified by the CA. If you have any questions, HUAWEI CLOUD will work with you to communicate and negotiate with the CA.

After a new certificate is issued, you need to install it on the server to replace the current certificate that is about to expire or replace the certificate in the corresponding cloud product. For more details about certificate installation, see the following FAQs: