Docs

Certificate Center

Certificate application

Creating an SSL certificate order

This article describes how to create an SSL certificate order in VolcanoEngine Certificate Center.

Background

Certificate Center's SSL Certificate Service allows you to order SSL certificates from major certificate authorities (CAs). To obtain an SSL certificate, you must first create an SSL certificate order and submit a certificate request to a CA. After the CA approves your certificate request, it will issue your certificate.

Before creating an SSL certificate order, refer to the following documents for more information:

SSL Certificate Billing Instructions: Learn about all the SSL certificate specifications supported by Certificate Center.

SSL Certificate Selection Guide: Learn how to select an SSL certificate.

Prerequisites

You have .

Procedure

In the left navigation pane, select SSL certificate > Certificates.

Click Purchase Certificate.

On the Purchase certificate page, complete the relevant configurations according to the configuration instructions, and then click Buy now.

Confirm the order and complete the payment.

After the order is created, you can view the corresponding certificate instance on the Certificate management page. If your order includes multiple certificates, you will receive the corresponding number of certificate instances.

tip

If you receive a notification that your order was created successfully, but do not see the corresponding certificate instance in the list, check the project selected in the top navigation bar. The list only shows the certificate instances that belong to the selected project.

Configuration instructions

Category	Configuration item	Description
Certificate information	Certificate standard	Select a certificate standard. Options: RSA/ECC Standard: Supports RSA and ECC algorithms, is compatible with most browsers, and meets general certificate usage needs. SM Standard: Supports the SM2 Chinese cryptographic algorithm and SM security protocols, is compatible with SM browsers, and meets the SM certificate usage requirements for government and enterprises.
		Certificate type	Select the certificate level. Options: DV \| Domain-validated: DV certificates offer a medium level of trust and are suitable for personal and non-commercial websites. For DV certificate requests, the CA only verifies the applicant's ownership of the domain name. DV certificates are generally issued within a few hours. OV \| Organization-validated: OV certificates offer a high level of trust and are suitable for public-facing commercial websites. For OV certificate requests, in addition to verifying the applicant's ownership of the domain name, the CA also verifies the authenticity of the business. OV certificates are generally issued within 3 to 5 business days. EV \| Extended Validation: EV certificates offer the highest level of trust and are suitable for websites that handle sensitive information, such as e-commerce or financial websites. For EV certificate requests, in addition to verifying the applicant's ownership of the domain name, the CA also conducts a thorough review of the business. The review process involves checking company documents, confirming the applicant's identity, and verifying information with third-party databases. EV certificates are typically issued within 7-10 business days. DV Beta \| Domain Level: DV beta certificates, issued by DigiCert, support only "DV Single Domain" and are valid for one year. Beta certificates are suitable for testing and personal websites. We recommend purchasing a standard certificate for production environments.
		Certificate brand	Select a certificate brand. A certificate brand corresponds to a CA. Options: Digicert: A globally renowned Digital Certificate Authority. Digicert Pro: A high-end sub-brand launched by Digicert. GeoTrust: A cost-effective sub-brand launched by Digicert. GlobalSign: An internationally renowned Digital Certificate Authority. WoTrus: A leading Digital Certificate Authority in China that supports SM algorithms. vTrus: A Chinese certificate brand with excellent compatibility that supports SM algorithms. AlphaSSL: A sub-brand of GlobalSign. sslTrus: A cost-effective Chinese certificate brand. tip Some brands appear only after you select a specific certificate level. If a brand option is missing, it means the brand does not offer certificates at the current certificate level. For more information, see SSL Certificate Billing Instructions.
		Domain type	Select the domain name type to be protected by the certificate. Options: Single domain name: protects a specific fully qualified domain name (FQDN) or an IP address. Example: example.com, www.example.com, 1.XX.XX.1. Wildcard domain: protects a wildcard domain name. Example: .example.com. A wildcard domain name can match all of its subdomains at the next level. For example, .example.com can match a.example.com and b.example.com, but it cannot match a.b.example.com. Mixed multi-domain: protects multiple domain names. These domains can be single domain names, IP addresses, or wildcard domains. warning The domain name level cannot exceed 100. For example, the domain level for example.com is 2 and for www.example.com is 3. Only some certificate brands support IP addresses as protected objects. For more information, see Certificate Brands That Support IP Certificates. Only OV certificates from Globalsign support the mixed multi-domain type. For more information, see Mixed Multi-Domain Certificates.
		Service duration	Select the subscription duration for your SSL Certificate Service. When the selected certificate brand is DigiCert, Digicert Pro, or GeoTrust, the service duration is 199 days. When the selected certificate brand is GlobalSign, WoTrus, vTrus, AlphaSSL, or sslTrus, the service duration is 1 year. tip Starting February 10, 2026, VolcanoEngine Certificate Center will adjust the validity period rules for relevant public SSL/TLS certificates in accordance with the latest baseline requirements of the CA/B Forum and the actual implementation policies of each certificate vendor. All certificate brands will be included in the platform's unified change scope starting February 10, 2026. However, the specific certificate validity period and pricing rules will be subject to the final implementation policies of each certificate vendor. For details, see Notice on Shortening SSL Certificate Validity Period.
		Purchase method	Select a purchase method. Options: Express Purchase: This method immediately submits a certificate request to the CA after the order is created. If you select this method, you need to fill in the certificate request information on the current page. With this method, you can only purchase one certificate at a time, but the certificate is issued faster. tip Certificate request information includes: Key Algorithm, CSR Generation Method, Domain Name (CN), Select Information Template, Domain Validation Method, etc. These configuration items only appear when the Purchase Method is Express Purchase. For instructions on configuring certificate request information, see Requesting an SSL certificate. If the domain type is Hybrid Multi-Domain, quick domain name purchase is not supported. Purchase by certificate quantity: submit your certificate request to the CA after creating the order. If you select this option, you can set the number of certificates to purchase on this page for a batch purchase. After payment, go to the Certificate Center console to continue your certificate application.
		Quantity	Enter the quantity of certificates to purchase. tip This configuration item only appears when the Purchase Method is set to Purchase by Quantity.
		Remark	Add remarks to the certificate for easier management.
More options	Project	Assign a VolcanoEngine project to the certificate. If your order includes multiple certificates, the selected project applies to all of them. A project is a VolcanoEngine resource management tool that groups resources from different cloud products, enabling project-level access control, bill classification, and more. For more information, see Project Overview. In the Certificate Center, a certificate (also known as a "certificate instance") represents a type of resource. You can assign a project to each certificate. If you have not created any projects or modified the default project, the only option under Project is default (Default Project). We recommend keeping the default setting. If you select another project, the certificate will be added to that project. Note that once the certificate order is created, you can only view the certificate under the selected project. Example: Assume your certificate is under the doc-test project. After the certificate order is created, you must select doc-test or All Resources as the project in the top navigation bar to view the certificate in the console. tip After the order is created, you can go to the Project Management page to modify the project to which the certificate belongs.
More options		Tag	Add one or more tags (in key-value pair format) to the certificate. With tags, you can classify, search, and control permissions for certificates from different dimensions, enhancing the flexibility of resource management.
Service Agreement	Agreement	By selecting this option, you confirm that you have read and agree to the Certificate Center's Terms of Service.

Last updated: 2026.04.01 10:51:37