How Do I Configure a Certificate Expiration Notification?

Scenario

An SSL certificate has a validity period and cannot be used after it expires. If you have not enabled auto-renewal, manually renew the certificate or purchase another one 3 to 10 working days before it expires. If you have enabled auto-renewal, check the SMS notifications, and finish required verification 3 to 10 working days before the certificate expires to ensure that the certificate is valid before the CA validates your verification and issues a new certificate.

To prevent risks caused by certificate expiration, we provide the following methods to notify you of certificate expiration:

• Reminder on the SCM console: For hosted or issued certificate, a certificate expiration reminder will be displayed on the SCM console 30 days before a certificate expires. Figure 1 shows an example.
  Figure 1 Certificate list
  
• Message notification: For issued and uploaded certificates, SCM automatically notifies the certificate applicants or configured message recipients of the expiration two months, one month, one week, three days, and one day before the certificate expires and again on the day when the certificate actually expired. For details about how to add or modify a notification recipient, see Adding a Message Recipient.

Adding a Message Recipient

1. Log in to the management console.
2. Click in the upper right corner of the page.
3. Click More to go to the Message Center page.
4. In the navigation pane on the left, click SMS & Email Settings.
5. In the Product area, select Product resource to expire and click Add Recipient in the upper part of the page.
   Figure 2 Add Recipient
   

6. In the displayed Add Recipient dialog box, select existing recipients, or click Add Recipient above the recipient list, enter the name, email address, and mobile number of the new recipient, and click Save.
   Figure 3 Add Recipient
   

7. Click OK.

   After a recipient is added, the system automatically sends a verification message to the entered mobile number and email address. The newly added recipient can receive messages only after the verification.

Follow-up Operations

After the configuration is complete, the expiration notification is enabled by default. You can disable or enable it if needed. To do so, click the certificate name to go to the certificate details page and toggle off () or on ()Expiration Notification.

The expiration notification toggle is displayed only when the certificate is in the Issued, Expired, and Hosting states. The status of Expiration Notification cannot be changed for expired certificates.

Figure 4 Expiration Notification