Viewing Certificate Information

Constraints

• You can receive certificate expiration notifications only after configuring the certificate expiration notification.
• If you update or import a certificate when adding a website to WAF, the Certificate Source column for this type of certificate is SCM. For those certificates, only Use and Delete buttons are available in the Operation column.

Prerequisites

You have obtained certificates from Huawei Cloud CCM or uploaded certificates to WAF. For details, see Uploading a Certificate to WAF.

Checking Certificate Details

1. Log in to the WAF console.
2. Click in the upper left corner and select a region or project.
3. (Optional) If you have enabled the enterprise project function, in the upper part of the navigation pane on the left, select your enterprise project from the Filter by enterprise project drop-down list. Then, WAF will display the related security data in the enterprise project on the page.
4. In the navigation pane on the left, choose Objects > Certificates.
5. View the certificate information. For details about related parameters, see Table 1.
   Figure 1 Certificate list
   

   Table 1 Certificate parameters

   Parameter	Description
   Name	Certificate name displayed in WAF. It is used to identify a certificate. You can customize the name.
   Type	International certificates are supported.
   Expires	Certificate expiration time. After a certificate expires, an HTTPS access error will be reported, a message indicating that the website is insecure will be displayed, and WAF protection rules will not take effect. You are advised to configure a certificate expiration notification to stay informed of the certificate expiration status. Update the certificate before it expires. For more details, see Updating the Certificate Used for a Website.
   Domain Name	The protected domain name that uses the certificate. A certificate that matches multiple domain names can be used for multiple domain names. A single protected domain name can use only one certificate.
   Certificate Source	WAF: Certificates are manually added to the WAF console. SCM: Certificates are pushed from SCM and selected when you add a domain name or update a certificate. You can only Use and Delete this type of certificate in WAF.
   Enterprise Project	The enterprise project that the certificate belongs to.
   Sharing Status	Whether the certificate is shared with other enterprise projects. Shared Unshared

Related Operations

• To change the certificate name, move the cursor over the name of the certificate, click , and enter a new certificate name.

  If the certificate is in use, unbind the certificate from the domain name first. Otherwise, the certificate name cannot be changed.

• To view details about a certificate, click View in the Operation column of the certificate.
• To use a certificate for the corresponding domain name, click Use in the Operation column of the certificate.
• To delete a certificate, click More > Delete in the Operation column of the certificate.
  

  • Before deleting a certificate, ensure that the certificate is not used for any domain name. If the certificate is still used for a domain name, deleting it will cause the domain name to lose the HTTPS certificate and HTTPS service access will be abnormal. If you are sure that you want to delete the certificate, delete it from the domain name first.
  • Deleted certificates cannot be restored. Before deleting a certificate, ensure that it is no longer used by any protected domain name. If a certificate is deleted mistakenly, you need to upload the certificate file again.
• To update a certificate, click More > Update in the Operation column of the certificate.
• To share a certificate with other enterprise projects, click More > Share in the Operation column of the certificate.
• To stop sharing a certificate with other enterprise projects, click More > Stop Sharing in the Operation column of the certificate.

FAQ

What Are the Impacts of Certificate Expiration and How Do I Handle It?