Overview

Renewal Introduction

You can renew SSL certificates and yearly/monthly private CA. You can purchase private CA and private certificates on a pay-per-use basis, just ensure that your account has a valid payment method configured or a top-up account with a sufficient balance.

**Table 1**
Renewal Type	Scenario	Renewal Method	Description
SSL certificates	An SSL certificate is a one-time payment product. An expired SSL certificate cannot encrypt communications over HTTPS. This will put your service at risk. If you want to continue using an SSL certificate, you need to renew the certificate before it expires. NOTE: To prevent risks caused by certificate expiration, we provide the following methods to notify you of certificate expiration: If you want to add or modify the notification recipient, see How Do I Configure SSL Certificate Expiration Notifications?	Auto-renewing an SSL Certificate	After auto-renewal is enabled, the system automatically purchases a new certificate with the same specifications within 30 days before the certificate expires and submits a certificate application using the original certificate application information. After auto-renewal is enabled, check the email notification. The domain name ownership and identity of the applicant need to be verified during certificate application. Therefore, you need to cooperate with the CA to complete domain name verification and organization verification before the certificate issuance.
SSL certificates		Manually Renewing an SSL Certificate	The manual renewal entry is available only for 30 calendar days before an SSL certificate expires.
Private CA	Applies only to private CAs charged in yearly/monthly mode. If a private CA expires, you cannot enable the CA or apply for new certificates under the CA, which may affect service running. You are advised to renew the CA before it expires.	Auto-renewing a Private CA	When purchasing a private CA in yearly/monthly mode, you are advised to select Auto-renew to prevent your services from being affected by delayed renewal.
Private CA		Manual Renewal	Go to the Billing Center to renew the subscription. For details, see Renewal Overview.

Comparison Between SSL Certificate Renewal and Re-purchase

For renewed certificates, the system pre-fills the information and you can pay directly after confirmation. For newly purchased certificates, you need to manually enter all the information. After the payment, you only need to verify the domain name.
When you renew a certificate, the validity period of the new certificate will be the validity period of the original certificate plus the validity period you selected (the maximum validity period is 30 days). This is a unique benefit of the new certificate. It cannot be used for newly purchased certificates.

Only paid SSL certificates that have been purchased in Huawei Cloud SCM and are about to expire can be renewed. Uploaded certificates, free certificates, and single-domain expansion packages cannot be renewed. If the test certificate quota is used up, see What Can I Do If My Test Certificate Quota Is Used Up?