- Release Notes
- Announcements
- Price Change to DigiCert SSL Certificates
- TrustAsia Root Certificate Update
- Domain Validation Policy Update
- SSL Certificate Service Console
- Multi-Year SSL Certificate and Automatic Review
- Notice on Stopping the Issuance of 2-Year SSL Certificates by CAs Starting from September 1, 2020
- Announcement on Stop Using the Symantec SSL Certificate Name After 30 April 2020
- Notice on Certificate Revocation Due to Private Key Compromises
- Notice on Application Limits for DV SSL Certificates
- Notice on Adjustment of Free SSL Certificates Policy
- Let's Encrypt Root Certificate Expired on September 30, 2021
- Product Introduction
- Purchase Guide
- Getting Started
- Certificate Application
- Domain Ownership Validation
- Operation Guide
- Certificate Installation
- Installing an SSL Certificate on a Tencent Cloud Service
- Installation of International Standard Certificates
- Installing an SSL Certificate on an Nginx Server
- Installing an SSL Certificate on an Apache Server (Linux)
- Installing an SSL Certificate on an Apache Server (Windows)
- Installing an SSL Certificate (JKS Format) on a Tomcat Server (Linux)
- Installing an SSL Certificate (JKS Format) on a Tomcat Server
- Installing an SSL Certificate (PFX Format) on a Tomcat Server
- Installing an SSL Certificate on a GlassFish Server
- Installing an SSL Certificate on a JBoss Server
- Installing an SSL Certificate on a Jetty Server
- Installing an SSL Certificate on an IIS Server
- Installing a Certificate on WebLogic Servers
- Selecting an Installation Type for an SSL Certificate
- Certificate Management
- Instructions on SSL Certificate Auto-Renewal
- Certificate Hosting
- Uploading (Hosting) an SSL Certificate
- Reminding Reviewers to Review an SSL Certificate Application
- Revoking an SSL Certificate
- Deleting an SSL Certificate
- Reissuing an SSL Certificate
- Ignoring SSL Certificate Notifications
- Customizing SSL Certificate Expiration Notifications
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Certificate APIs
- ApplyCertificate
- CancelAuditCertificate
- CancelCertificateOrder
- CommitCertificateInformation
- CreateCertificate
- DeleteCertificate
- DescribeCertificate
- DescribeCertificateOperateLogs
- DescribeHostUpdateRecord
- DescribeHostUpdateRecordDetail
- DownloadCertificate
- ModifyCertificateAlias
- ModifyCertificateProject
- ModifyCertificateResubmit
- ReplaceCertificate
- SubmitCertificateInformation
- UpdateCertificateInstance
- UpdateCertificateRecordRetry
- UpdateCertificateRecordRollback
- UploadConfirmLetter
- CreateCertificateBindResourceSyncTask
- DescribeCertificateBindResourceTaskDetail
- DescribeCertificateBindResourceTaskResult
- DescribeCertificateDetail
- DescribeCertificates
- DescribeHostTeoInstanceList
- UploadCertificate
- CSR APIs
- Data Types
- Error Codes
- Practical Tutorial
- Automatic Solution for Implementing and Issuing Multi-Year Certificates and Binding Resources
- Apple ATS Server Configuration
- Quickly Applying for a Free SSL Certificate via DNSPod
- Enabling Tencent Cloud DDNS and Installing Free Certificates for Synology NAS
- Batch Applying for and Downloading Free Certificates Using Python-based API Calls
- Profile Management
- Troubleshooting
- Domain Validation Failed
- Domain Security Review Failed
- Website Inaccessible After an SSL Certificate is Deployed
- 404 Error After the SSL Certificate is Deployed on IIS
- “Your Connection is Not Secure” is Displayed After the SSL Certificate is Installed
- Message Indicating Parsing Failure Is Displayed When a Certificate Is Uploaded
- Automatic DNS Validation Failed for a Domain Hosted with www.west.cn
- Host Name Field Cannot Be Edited in IIS Manager When Type Is Set to https
- Message Indicating Intermediate Certificates Missing in Chain Is Displayed When a Free SSL Certificate Is Deployed on IIS
- FAQs
- SSL Certificate Selection
- SSL Certificate Application
- Quota of Free SSL Certificates
- How to Fill In the Domains Bound to an SSL Certificate During the Application?
- Wildcard SSL Certificates
- Why Does the Order Status Not Changed After a Notification Email Is Received from a CA?
- Can the TXT Records for Domain Name Resolution Configured in the Certificate Be Deleted?
- What Is CSR?
- How Do I Make a CSR File?
- What Is Private Key Password?
- Forgot Your Private Key Password?
- Can an SSL Certificate Be Revoked?
- What are the differences between RSA and ECC?
- What Should I Do If the Console Prompts That "The Certificate Is Bound to Tencent Cloud Resources and Cannot Be Revoked" When I Submit an SSL Certificate Revocation Application?
- What’s the Difference Between Certificate Reissue and Reapplication?
- Which SSL Certificate Types Are Supported for Mini Programs?
- SSL Certificate Management
- SSL Certificate Installation
- What Should I Do If the Host Name Field Is Uneditable in the IIS Manager?
- How Do I Enable Port 443 for a Server?
- Why Does the Website Prompt “Connection Is Untrusted"?
- How Do I Install OpenSSL?
- How Can I Set TLS Versions for SSL Certificates?
- How Can I Combine an SSL Certificate Chain?
- Can Tencent Cloud SSL Certificates Be Used for WebSocket?
- How Do I Enable the IIS Service?
- What Should I Do If I Am Prompted That HTTPS Is Not Secure After Reapplying for Deployment upon Expiration of the SSL Certificate?
- SSL Certificate Region
- SSL Certificate Review
- SSL Certificate Taking Effect
- Is the Original SSL Certificate Still Valid After the Server IP Address Is Changed?
- How Do I Check in a Browser Whether an SSL Certificate Has Taken Effect?
- What Should I Do If GlobalSign Certificates Are Not Supported in Windows 7?
- What Should I Do If the Issue of a Free SSL Certificate Takes Too Long or Failed?
- SSL Certificate Billing and Purchase
- SSL Certificate Validity Period
- Related Agreement
- Contact Us
- Glossary
- Release Notes
- Announcements
- Price Change to DigiCert SSL Certificates
- TrustAsia Root Certificate Update
- Domain Validation Policy Update
- SSL Certificate Service Console
- Multi-Year SSL Certificate and Automatic Review
- Notice on Stopping the Issuance of 2-Year SSL Certificates by CAs Starting from September 1, 2020
- Announcement on Stop Using the Symantec SSL Certificate Name After 30 April 2020
- Notice on Certificate Revocation Due to Private Key Compromises
- Notice on Application Limits for DV SSL Certificates
- Notice on Adjustment of Free SSL Certificates Policy
- Let's Encrypt Root Certificate Expired on September 30, 2021
- Product Introduction
- Purchase Guide
- Getting Started
- Certificate Application
- Domain Ownership Validation
- Operation Guide
- Certificate Installation
- Installing an SSL Certificate on a Tencent Cloud Service
- Installation of International Standard Certificates
- Installing an SSL Certificate on an Nginx Server
- Installing an SSL Certificate on an Apache Server (Linux)
- Installing an SSL Certificate on an Apache Server (Windows)
- Installing an SSL Certificate (JKS Format) on a Tomcat Server (Linux)
- Installing an SSL Certificate (JKS Format) on a Tomcat Server
- Installing an SSL Certificate (PFX Format) on a Tomcat Server
- Installing an SSL Certificate on a GlassFish Server
- Installing an SSL Certificate on a JBoss Server
- Installing an SSL Certificate on a Jetty Server
- Installing an SSL Certificate on an IIS Server
- Installing a Certificate on WebLogic Servers
- Selecting an Installation Type for an SSL Certificate
- Certificate Management
- Instructions on SSL Certificate Auto-Renewal
- Certificate Hosting
- Uploading (Hosting) an SSL Certificate
- Reminding Reviewers to Review an SSL Certificate Application
- Revoking an SSL Certificate
- Deleting an SSL Certificate
- Reissuing an SSL Certificate
- Ignoring SSL Certificate Notifications
- Customizing SSL Certificate Expiration Notifications
- API Documentation
- History
- Introduction
- API Category
- Making API Requests
- Certificate APIs
- ApplyCertificate
- CancelAuditCertificate
- CancelCertificateOrder
- CommitCertificateInformation
- CreateCertificate
- DeleteCertificate
- DescribeCertificate
- DescribeCertificateOperateLogs
- DescribeHostUpdateRecord
- DescribeHostUpdateRecordDetail
- DownloadCertificate
- ModifyCertificateAlias
- ModifyCertificateProject
- ModifyCertificateResubmit
- ReplaceCertificate
- SubmitCertificateInformation
- UpdateCertificateInstance
- UpdateCertificateRecordRetry
- UpdateCertificateRecordRollback
- UploadConfirmLetter
- CreateCertificateBindResourceSyncTask
- DescribeCertificateBindResourceTaskDetail
- DescribeCertificateBindResourceTaskResult
- DescribeCertificateDetail
- DescribeCertificates
- DescribeHostTeoInstanceList
- UploadCertificate
- CSR APIs
- Data Types
- Error Codes
- Practical Tutorial
- Automatic Solution for Implementing and Issuing Multi-Year Certificates and Binding Resources
- Apple ATS Server Configuration
- Quickly Applying for a Free SSL Certificate via DNSPod
- Enabling Tencent Cloud DDNS and Installing Free Certificates for Synology NAS
- Batch Applying for and Downloading Free Certificates Using Python-based API Calls
- Profile Management
- Troubleshooting
- Domain Validation Failed
- Domain Security Review Failed
- Website Inaccessible After an SSL Certificate is Deployed
- 404 Error After the SSL Certificate is Deployed on IIS
- “Your Connection is Not Secure” is Displayed After the SSL Certificate is Installed
- Message Indicating Parsing Failure Is Displayed When a Certificate Is Uploaded
- Automatic DNS Validation Failed for a Domain Hosted with www.west.cn
- Host Name Field Cannot Be Edited in IIS Manager When Type Is Set to https
- Message Indicating Intermediate Certificates Missing in Chain Is Displayed When a Free SSL Certificate Is Deployed on IIS
- FAQs
- SSL Certificate Selection
- SSL Certificate Application
- Quota of Free SSL Certificates
- How to Fill In the Domains Bound to an SSL Certificate During the Application?
- Wildcard SSL Certificates
- Why Does the Order Status Not Changed After a Notification Email Is Received from a CA?
- Can the TXT Records for Domain Name Resolution Configured in the Certificate Be Deleted?
- What Is CSR?
- How Do I Make a CSR File?
- What Is Private Key Password?
- Forgot Your Private Key Password?
- Can an SSL Certificate Be Revoked?
- What are the differences between RSA and ECC?
- What Should I Do If the Console Prompts That "The Certificate Is Bound to Tencent Cloud Resources and Cannot Be Revoked" When I Submit an SSL Certificate Revocation Application?
- What’s the Difference Between Certificate Reissue and Reapplication?
- Which SSL Certificate Types Are Supported for Mini Programs?
- SSL Certificate Management
- SSL Certificate Installation
- What Should I Do If the Host Name Field Is Uneditable in the IIS Manager?
- How Do I Enable Port 443 for a Server?
- Why Does the Website Prompt “Connection Is Untrusted"?
- How Do I Install OpenSSL?
- How Can I Set TLS Versions for SSL Certificates?
- How Can I Combine an SSL Certificate Chain?
- Can Tencent Cloud SSL Certificates Be Used for WebSocket?
- How Do I Enable the IIS Service?
- What Should I Do If I Am Prompted That HTTPS Is Not Secure After Reapplying for Deployment upon Expiration of the SSL Certificate?
- SSL Certificate Region
- SSL Certificate Review
- SSL Certificate Taking Effect
- Is the Original SSL Certificate Still Valid After the Server IP Address Is Changed?
- How Do I Check in a Browser Whether an SSL Certificate Has Taken Effect?
- What Should I Do If GlobalSign Certificates Are Not Supported in Windows 7?
- What Should I Do If the Issue of a Free SSL Certificate Takes Too Long or Failed?
- SSL Certificate Billing and Purchase
- SSL Certificate Validity Period
- Related Agreement
- Contact Us
- Glossary
Instructions on SSL Certificate Auto-Renewal
Last updated: 2024-08-05 14:04:11
The default validity period for SSL certificates is 1 year. You should renew and update the certificate within 30 calendar days before its expiration to extend its service duration. To prevent business disruptions caused by certificate expiration, Tencent Cloud provides the certificate auto-renewal service. This document describes how to enable certificate auto-renewal (for paid certificates only).
Applicable Objects
Certain paid certificates (validity period of 1 year). Other certificate brands will be supported soon. Stay tuned.
Certificate Brand | DNSPod | | TrustAsia | WoTrus |
Certificate Type | DV | | DV | DV |
Domain Name Type | Single domain name | Wildcard domain name | Wildcard domain name | Wildcard domain name |
Auto-Renewal | Supported | Supported | Supported | Supported |
Notes
Auto-renewal can only be enabled 14 days (included) before the SSL certificate expires. It cannot be enabled if the remaining time is less than 14 days.
Auto-renewal will be terminated if fee deduction from your account balance fails. You need to renew manually.
After the certificate is issued, you need to manually update it to you cloud resources.
Auto-Renewal Process
Step 1: Entering the Certificate List to Enable Auto-Renewal
1. You can enable auto-renewal for paid certificates 14 days before expiration. Go to the SSL Certificate Control, find the target certificate in My Certificates, and enable auto-renewal.
2. Click Activate Auto-Renewal in the pop-up dialog box of SSL certificate renewal.
Step 2: Ensuring Sufficient Account Balance
After you enable auto-renewal, the fee is not deducted immediately. The system will deduct the fee 30 days before the certificate expiration. Please ensure your account balance is sufficient. The fee for renewal is for reference only, and the amount is subject to the actual deduction.
Note:
If the deduction fails due to insufficient account balance, auto-renewal of the certificate will be terminated. You need to renew manually.
Step 3: Deducting the Fee Automatically by the System 30 Days Before the Certificate Expires
After the system successfully deducts the fee, the certificate renewal is successful, and a new certificate pending validation will be generated automatically.
Note:
The new certificate's validity period after renewal will be extended by one year from the expiration date of the old certificate. For example, if the old certificate to be renewed expires on November 1, 2021, and you complete the renewal and issuance on October 1, 2021, the new certificate's validity period will be from October 1, 2021, to November 1, 2022.
Step 4: Issuing the New Certificate (Manual Operation May be Required)
If the domain name bound to your certificate is hosted on Tencent Cloud, the system will automatically add a DNS validation. If the domain name is hosted on a third-party platform, you need to manually add a DNS validation.
Note:
If the domain name bound to your certificate is not hosted on Tencent Cloud, please be sure to take note. The new certificate cannot be issued if no DNS validation is added within seven days.
If your certificate is of the OV or EV type, you may also need to upload the confirmation letter. For the process of uploading the confirmation letter, see Upload the confirmation letter.
Step 5: Updating the Certificate to Cloud Resources After the Issuance
After the certificate is successfully issued, manually update the new certificate to the associated cloud resources.
Yes
No
Was this page helpful?