- What's New
- Function Overview
- Service Overview
-
SSL Certificate Manager (SCM)
- About SCM and SSL Certificate Usage
- Purchasing an SSL Certificate
- Applying for an SSL Certificate
- Deploying SSL Certificates
-
Managing SSL Certificates
- Reissuing an SSL certificate
- Unsubscribing from an SSL Certificate
- Renewing an SSL Certificate
- Revoking an SSL Certificate
- Deleting an SSL Certificate from CCM
- Uploading an External Certificate to SCM
- Adding an Additional Domain Name
- Withdrawing an SSL Certificate Application
- Canceling Authorization for Privacy Information
- Pushing an SSL Certificate to Other Cloud Services
- Viewing Details About an SSL Certificate
- Viewing the Application Progress
- Permissions Management
- Change History
-
Private Certificate Authority (PCA)
- Overview of Private Certificate Application
- Private CA Management
-
Private Certificate Management
- Applying for a Private Certificate
- Downloading a Private Certificate
-
Installing a Private Certificate
- Trusting a Private Root CA
- Installing a Private Certificate on a Client
-
Installing a Private Certificate on a Server
- Installing a Private Certificate on a Tomcat Server
- Installing a Private Certificate on an Nginx Server
- Installing a Private Certificate on an Apache Server
- Installing a Private Certificate on an IIS Server
- Installing a Private Certificate on a WebLogic Server
- Installing a Private Certificate on a Resin Server
- Revoking a Private Certificate
- Viewing Details of a Private Certificate
- Deleting a Private Certificate
- Permissions Management
- Change History
- API Reference
-
FAQs
-
FAQs
-
Certificate Consulting
- What Are the Differences Between SSL Certificate Manager and Private Certificate Authority?
- Which Websites Require HTTPS?
- What Are the Differences Between HTTPS and HTTP?
- What Is a Public Key and a Private Key?
- What Are the Relationships Between a Public Key, Private Key, and Digital Certificate?
- Why Is a Non-Password-Protected Private Key Required?
- What Are Mainstream Formats of Digital Certificates?
- What Information Does an SSL Certificate Contain?
- Can I Use SSL Certificates for Other Regions, Accounts, or Platforms?
- Can I Use an Unused SSL Certificate Anytime I Want?
- Can SSL Certificates Be Upgraded?
- Does the SSL Certificate Have Restrictions on the Server Port?
- Why Is the Service Displayed as Inaccessible or the Button Displayed in Gray When I Access the SCM Service on the Console?
-
SSL Certificate Application and Purchase
-
SSL Certificate Selection
- Does SCM Provide Free Certificates?
- How Do I Select an SSL Certificate?
- How Can I Apply for a Free SSL Certificate?
- What Can I Do If My Free Certificate Quota Is Used Up?
- How Do I Query the Remaining Quota for Free SSL Certificates?
- How Do I Apply for an Entry-Level SSL Certificate?
- What Are Differences Between Free and Paid SSL Certificates?
- How Do I Apply for a Combination Certificate?
- Can I Change the Certificate Authority, Type, or Bound Domain After A Certificate Is Purchased?
- Problems Related to Certificate Purchases
- How Do I Apply for an SSL Certificate That Uses SM Series Cryptographic Algorithms?
-
About Required Domain Name Details
- How Do I Enter a Domain Name for a Certificate When Applying for an SSL Certificate?
- What Are the Differences Between a Single-Domain Name, Multi-Domain Name, and Wildcard-Domain Name in SCM?
- What Is the Relationship Between a Domain Name and an SSL Certificate?
- What Domains Can Wildcard-Domain Certificates Support?
- What Domain Name Should I Use to Apply for an SSL Certificate?
- Can I Change the Primary Domain Name Associated with a Certificate?
- Does the Relationship Between the Primary Domain Name and Additional Domain Name Have Any Impact on Domain Names?
- How Do I Make a CSR File?
- What Are the Differences Between the CSR Generated by the System and the CSR Made by Yourself?
- Domain-related Concepts
- Problems Related to Domains
-
SSL Certificate Selection
- SSL Certificate Approval
-
SSL Certificate Download, Installation, and Use
-
SSL Certificate Use
- Which Region Will a Certificate Be Deployed to When I Deploy an SSL Certificate in CCM to Other Cloud Product?
- Is HTTPS Automatically Enabled After an SSL Certificate Is Deployed to a Cloud Product?
- Why Is a Message Indicating that the Certificate Chain Is Incomplete Displayed When I Configure HTTPS on CDN?
-
SSL Certificate Use
-
Certificate Validity Period
- What Can I Do If My SSL Certificate Expired?
- How Long Is an SSL Certificate Valid?
- What Can I Do If an SSL Certificate Is About to Expire?
- How Long Does an SSL Certificate Take Effect After Being Purchased?
- Validity Periods and Replacement of the Current and New SSL Certificates
- How Can I Renew an SSL Certificate?
- Will Services Be Affected If an SSL Certificate Is Not Updated After It Expires?
- Validity Periods of Private Certificates
- How Long Will an Order Become Invalid If I Do Not Apply for a Certificate After Purchasing It?
- Certificate Management
-
Certificate Consulting
- Change History
-
FAQs
Show all
Why Does the Certificate Stay in the CA Verifying Status for a Long Time?
Upon completion of the certificate information, the Certificate Authority (CA) will review your domain name and the submitted certificate information. To ensure that your certificate can be issued as soon as possible, perform the following operations.
The approval time may vary depending on certificate authorities. For details about approval time, see How Long Does It Take to Approve an SSL Certificate?
Procedure
- Check whether the ownership of the domain name for which the certificate is used is verified.
- If domain ownership is verified, go to 2.
- If domain ownership has not been verified, go to your domain name service provider to complete the verification.
- Check whether you have correctly filled in and submitted the certificate application.
- Ensure that you have completed domain name verification and organization verification according to the certificate status/application progress on the SCM console.
- If you have completed domain ownership verification and organization verification, go to 4.
- If you have not completed domain ownership verification and organization verification, perform operations as prompted.
- Check whether the domain name verification takes effect.
For details, see How Do I Check Whether Domain Name Verification Takes Effect?
- If domain name verification takes effect, go to 5.
- If the verification still does not take effect, perform the required operations in What Can I Do If Domain Ownership Verification Does Not Take Effect?
- Check whether Certification Authority Authorization (CAA) restricts the CA from issuing certificates.
- If yes, you can cancel the restriction or add a CAA resolution record.
- If the CA is not restricted by CAA, go to 6.
- The review may take a while.
After you apply for a certificate, the CA will review your information. The review may take a while.
The CA will contact you by the phone number you provided to guide you through necessary operations. Make sure that you can be reached by phone during the validation. If the CA cannot contact you in time, the order validation progress may be delayed.
- Validation duration for OV and EV certificates
For OV or EV certificates, it takes three to seven working days for the CA to review your certificate order.
During the validation, the CA will contact you using the phone number you provided to guide you through necessary operations. Make sure that you can be reached by phone. If the CA cannot contact you in time, the order validation progress may be delayed. Your timely response will effectively shorten the SSL certificate validation progress.
- Validation duration for DV certificates or free certificates
After the domain ownership is verified, the CA will issue the certificate within one to two working days.
If your domain name contains some special words, such as bank, pay, or live, the manual review mechanism may be triggered, which takes a long time to issue the certificate.
NOTE:
A free certificate will be issued within one to two working days after you apply for it. Your certificate may be issued within several hours or two working days, depending on the validation process of the CA.
- Validation duration for OV and EV certificates
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.