Help Center/ Cloud Certificate & Manager/ SSL Certificate Manager (SCM) User Guide/ Managing SSL Certificates/ Certificate Lifecycle Management/ Renewing an SSL Certificate
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Renewing an SSL Certificate

SSL certificates have a validity period. Once a certificate expires, it cannot be used. Renewals are allowed only for valid certificates. Renewing an SSL certificate is re-issuing a certificate. After the renewal is successful, you need to install and deploy the new certificate on the server to replace the old certificate that is about to expire. The new certificate does not affect the use of the existing certificate.

  • For issued certificates, the system automatically notifies you of the expiration by email and SMS one month, one week, three days, and one day before a certificate expires and again when the certificate actually expired. You can renew the certificate by referring to Performing a Manual Renewal or Auto-Renewal.
  • For an SSL certificate you upload to SCM, if you still need to use it, you need to upload a new one before it expires. For details, see Uploading an External SSL Certificate.

Comparison Between Certificate Renewal and Re-purchase

  • For renewed certificates, the system pre-fills the information and you can pay directly after confirmation. For newly purchased certificates, you need to manually enter all the information. After the payment, you only need to verify the domain name.
  • When you renew a certificate, the validity period of the new certificate will be the validity period of the original certificate plus the validity period you selected (the maximum validity period is 30 days). This is a unique benefit of the new certificate. It cannot be used for newly purchased certificates.

Only paid SSL certificates that have been purchased in Huawei Cloud SCM and are about to expire can be renewed. Uploaded certificates, free certificates, and single-domain expansion packages cannot be renewed. If the test certificate quota is used up, see What Can I Do If My Test Certificate Quota Is Used Up?

Validity Periods of Current and New Certificates

After a certificate is renewed, the validity periods of the current and new certificates are as follows:

  • Renewal with the certificate information unchanged

    If the certificate details remain unchanged, the actual validity period of the new certificate equals the remaining validity period of the original one plus the requested validity period of the new one. A maximum of 30 days can be counted towards the validity period of the new certificate. If you have not enabled auto-renewal, you are advised to apply for a certificate 30 days at the earliest before the current one expires.

    This rule is formulated, interpreted, and clarified by the corresponding CA.

  • Renewal with changed certificate information (for example, domain name, certificate type, or company name)

    The validity periods of the current and new certificates are calculated separately.

    The use of the new certificate does not affect the current certificate. The current certificate can continue to be used until it expires.