Help Center/ Anti-DDoS Service/ User Guide/ Advanced Anti-DDoS User Guide/ Certificate Management/ Updating a Certificate
Updated on 2026-07-06 GMT+08:00
View PDF
Share

Updating a Certificate

If your purchased certificate is about to expire, you are advised to acquire a new one before the expiration date and update the certificate associated with the domain name in Advanced Anti-DDoS.

To update the certificate, you can associate the new certificate with the domain name directly in Advanced Anti-DDoS.

Notes and Constraints

  • The certificate takes effect 1 minute after it is updated. Therefore, it is recommended to update certificates during off-peak hours.
  • Certificate expiration will disrupt services on your origin server. You are advised to update the certificate before it expires.
  • Each domain name must be associated with a certificate. A wildcard domain name can only use a wildcard certificate. If you do not have a wildcard certificate and only have single-domain certificates, you must add your domain names one by one in Advanced Anti-DDoS.

Updating a Certificate

  1. Log in to the AAD console.
  2. In the navigation pane on the left, choose Advanced Anti-DDoS > Domain Name Access. The Domain Name Access page is displayed.
  3. Locate the row that contains the target domain name, and click Update in the Service Type column.
  4. In the displayed Update Certificate dialog box, upload a new certificate or select an existing certificate.

    • Manual: Enter the certificate name and paste the certificate and private key text. Currently, only PEM certificates are supported. For details about how to convert non-PEM certificates, see Table 1.
    • Automatic: Select an issued certificate.
    • Select an existing certificate: Select the certificate that is in use.
    Table 1 Certificate format conversion commands

    Format

    Conversion Method

    CER/CRT

    Rename the cert.crt certificate file to cert.pem.

    PFX

    Use OpenSSL to convert the certificate.

    Obtain a private key. For example, run the following command to convert cert.pfx into cert.key:

    openssl pkcs12 -in cert.pfx -nocerts -out cert.key -nodes

    Obtain a certificate. For example, run the following command to convert cert.pfx into cert.pem:

    openssl pkcs12 -in cert.pfx -nokeys -out cert.pem

    P7B

    Use OpenSSL to convert the certificate. Perform the following steps to convert cert.p7b to cert.cer:

    1. Run the following command to convert the certificate: openssl pkcs7 -print_certs -in cert.p7b -out cert.cer
    2. Obtain the certificate content in cert.cer.
    3. Save the content in .pem format.

    DER

    Use OpenSSL to convert the certificate.

    1. Obtain a private key. For example, run the following command to convert privatekey.der into privatekey.pem:

      openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem

    2. Obtain a certificate. For example, run the following command to convert cert.cer into cert.pem:

      openssl x509 -inform der -in cert.cer -out cert.pem

    Before running the openssl command in Windows, ensure that the OpenSSL tool has been installed.

  5. Click OK.
Parent Topic: Certificate Management