Docs

Torch Object Storage

Domain management

Managing HTTPS certificates

This topic describes operations for managing HTTPS certificates, including associating, replacing, and disassociating certificates, after you have associated a custom domain with your bucket. If you do not have a certificate available, go to Certificate Center to purchase or upload one.

Prerequisites

You have obtained an Internet content provider (ICP) license for your domain name and associated it with your bucket. For instructions, see Setting up a custom domain.

Certificate status overview

Certificate status	Description
Unbound	No HTTPS certificate bound.
Bound	An HTTPS certificate is bound. You can access your custom domain via HTTPS.
Expired	The HTTPS certificate has expired. You can purchase or upload a new certificate in SSL Certificate Management and rebind it.
Deleted	The HTTPS certificate has been deleted.
Cross-service Authorization failed	The cross-service access role has been deleted, so TOS cannot access Certificate Center. Reauthorize to enable cross-service access.
Status unknown	The status of the HTTPS certificate cannot be determined.

Associating a certificate

To access a custom domain via HTTPS, associate an HTTPS certificate with the domain. Steps:

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Domain name and transfer acceleration > Domain Management.

On the Domain Management page, click Configuration in the HTTPS: Not configured section of the domain name you want to configure.

In the box that appears, select the certificate you want to associate and click Confirm.

warning

When you associate a certificate, you need to authorize TOS to access Certificate Center. To complete cross service authorization, click Click to Authorize next to Service Authorization in the box that appears. If your account is already authorized, no additional requests will be needed.

Only certificates that are issued, unexpired, and not revoked can be associated.

Make sure that the certificate you associate remains within its validity period.

Replacing a certificate

You can replace your currently associated certificate if it is no longer valid or if you need to update it for your custom domain. Steps:

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Domain name and transfer acceleration > Domain Management.

On the Domain Management page, click View in the HTTPS: section of the domain name. Then, click Update.

In the box that appears, select the certificate you want to replace and click Confirm.

Disassociating a certificate

If you no longer need to access the custom domain via HTTPS, you can disassociate the certificate from the domain. Steps:

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Domain name and transfer acceleration > Domain Management.

On the Domain Management page, click View in the HTTPS: section of the domain name. Then, click Unbind.

In the box that appears, verify the domain information and click Confirm.

warning

Exercise caution when disassociating an SSL certificate from your custom domain. Once this is done, the domain will no longer be accessible over HTTPS.

Last updated: 2026.07.24 11:20:32