Docs

Certificate Center

Private certificate

Managing a private certificate

This topic describes how to manage created private certificates in the Certificate Center console, including the following operations: downloading private certificates, revoking private certificates, and deleting private certificates.

Background

Private certificates created in the Certificate Center

After creation, a private certificate is in the Issued state by default. All supported states of a private certificate are shown in the table below.

Status	Notes	Actions allowed in the current status
Issued	Upon creation, private certificate is by default in the Issued state.	Certificate not expired: Download, revoke Certificate expired: Download, delete
Revoked	After you manually revoke a private certificate, its status changes to Revoked.	Delete

Uploaded private certificate

An uploaded private certificate also defaults to the Issued state. Supported actions: Download, delete.

Access private certificate management page

In the left navigation pane, select Private CA > Private certificate.

The Private certificate page will appear, where you can manage private certificates.

View private certificate details

On the Private certificate page, find the target private certificate and click the certificate name.

On the certificate details page, you can view the Basic information, Associated cloud resources, Subject information, and Certificate information of a private certificate.

Basic information includes: Name (CN), ID, (Affiliated) Private Sub CA, Validity Period, Serial Number, Key Algorithm, Signature Hash Algorithm, Creation Time, Expiration Time, Associated Project, Tags, and Remarks.

Associated cloud resources shows the deployment status of the private certificate on VolcanoEngine cloud products.

Subject information includes the following details of the private certificate: Organization (O), Organization Unit (OU), Country (C), State (ST), and Locality (L).

Certificate information displays the certificate content in PEM format.

Download private certificate

You can download the private certificate to your local computer.

Prerequisites

The status of the private certificate is Issued.

Procedures

On the Private certificate page, find the target certificate and click Download in the Actions column.

A certificate package will be downloaded to your browser's default download location.

Decompress the downloaded certificate package to obtain the private certificate file (with the extension .pem).

Revoke private certificate

If you find that a private certificate has a security risk (e.g., private key leakage), it is recommended that you revoke it promptly.

warning

Revoking a private certificate will cause it to no longer be trusted within the organization. Proceed with caution.

To avoid impacting your business, ensure the certificate is no longer in use before performing revocation.

A revoked certificate cannot be restored. If you need to replace a revoked certificate, you can create a new private certificate.

Prerequisites

A private certificate can be revoked if: it was created in Certificate Center (Certificate source is Certificate purchase), its status is Issued, and it has not expired.

Procedures

On the Private certificate page, find the target private certificate, and click Revoke in the Actions column.

In the pop-up dialog box, enter the reason for revoking the certificate, confirm the private certificate to be revoked is correct, and then click Revoke.

Delete private certificate

For private certificates created in Certificate Center, if the certificate has expired or its status is Revoked, you can delete it from the Certificate Center console.

For private certificates uploaded to Certificate Center, you can delete them from the console only when they have expired.

warning

Deleting a private certificate does not refund the consumed resource pack quota.

Procedures

On the Private certificate page, find the target private certificate, and click Delete in the Actions column.

In the pop-up dialog box, enter the reason for deleting the certificate, confirm the private certificate to be deleted is correct, and then click Delete.

Last updated: 2026.04.01 10:55:25