How Do I Add, Unbind, Replace, or Change the Domain Name for an SSL Certificate?

Adding a Domain Name to an SSL Certificate

If you have added an online site or subdomain name to your service, you need to enable SSL encryption for the new domain name. You can add the domain name to an SSL certificate in the following ways:

• If you have purchased an SSL certificate with a single domain name:

  A new certificate needs to be purchased.

• If you have purchased an SSL certificate with multiple domain names:
  • If the certificate has a quota for adding additional domain names, you can add additional domain names for the certificate. For more details, see Adding an Additional Domain Name.
  • If the certificate does not have a quota for additional domain names, you need to purchase a new certificate.
• If you have purchased an SSL certificate with a wildcard domain name:
  • If the domain name to be added is at the same level as the domain name associated with the certificate, you can directly use the existing certificate without adding the domain name.

    For example, if the domain name associated with the certificate is *.example.com and you want to associate test.example.com with the certificate, you do not need to add the domain name test.example.com, and you can directly use the existing certificate.

  • If the domain name to be added is not at the same level as the domain name associated with the certificate, you need to purchase a new certificate.

    For example, if the domain name associated with the certificate is *.example.com and you want to associate the domain name abc.test.example.com with the certificate, you need to purchase a new certificate and associate the domain name with the certificate.

Unbinding a Domain Name from an SSL Certificate

If your domain name service is offline, or the domain name has been transferred to another party, the certificate is no longer required to provide encryption services for the domain name. You can unbind a domain name from an SSL certificate in the following ways:

• If the certificate has not been issued, and you need to unbind the domain name from the current certificate and bind a new domain name:

  You can withdraw the certificate application. For details, see Withdrawing an SSL Certificate Application.

• If the certificate has been issued:

  For a single-domain or wildcard-domain certificate, apply for a reissue and associate the reissued certificate with new domain names. For a multi-domain certificate, domain names cannot be changed. You can purchase a new certificate for the new domain name.

  An issued certificate can be reissued within a specified period. The period varies depending on domain types and CAs. The following describes the period given by some CAs:

  • GlobalSign: 5 days.
  • DigiCert and GeoTrust: 25 days.

  There is no limit on how many times you can apply for reissues of a single-domain or wildcard-domain certificate only when the reissue is requested within the specified period. This period varies depending on CAs.

  For details about how to re-issue a certificate, see Re-issuing a Certificate.

Replacing or Changing the Domain Name Bound to an SSL Certificate

If your business entity changes, the old domain name is no longer used, or the primary domain name changes, you need to replace the original domain name bound to the certificate with a new one. You can replace or change the domain name bound to an SSL certificate in the following ways:

• If the certificate has not been issued:

  You can replace or change the domain name.

  You can withdraw the certificate application. For details, see Withdrawing an SSL Certificate Application.

• If the certificate has been issued:
  • Scenario 1: You can replace or change the domain name of a single-domain or wildcard-domain certificate.

    If you need to replace or change the domain name associated with an issued certificate, you can re-issue a certificate for a single-domain or wildcard-domain certificate.

    An issued certificate can be reissued within a specified period. The period varies depending on domain types and CAs. The following describes the period given by some CAs:

    • GlobalSign: 5 days.
    • DigiCert and GeoTrust: 25 days.

    There is no limit on how many times you can apply for reissues of a single-domain or wildcard-domain certificate only when the reissue is requested within the specified period. This period varies depending on CAs.

    For details about how to re-issue a certificate, see Re-issuing a Certificate.

  • Scenario 2: The domain names associated with a multi-domain certificate cannot be replaced or modified. You need to purchase a new certificate.

Related Operations

• Deploying an SSL Certificate to Other Huawei Cloud Products