EdgeNext Documentation

SSL/TLS provides users with a unified and visualized certificate lifecycle management capability, supporting operations such as online purchase, upload, download, editing, and service association. This helps users manage HTTPS encrypted communication efficiently and securely.

Subscription Certificates

1. Log in to the Security CDN Console, and select SSL/TLS from the left navigation panel to enter the Certificate Management page.

   
   

2. On the certificate management page, click the Subscription Certificates button to open the application window.

3. Two application modes are supported:

   • Domain Already Integrated with Security CDN:
     Users can select a domain from the dropdown list. Only domains already integrated with Security CDN will be displayed. Click Sure to create the certificate application task.

     
     

   • Domain Not Integrated with Security CDN:
     Users can select domains that have been added to Security CDN.

     • Only DNS validation is supported. Once a domain is selected, an NS record will be generated for validation.
     • Please go to your DNS provider to add the corresponding DNS record.

     Note: Free certificates are available from Let’s Encrypt and ZeroSSL as domain-validated certificates, valid for 3 months, and can be automatically renewed before expiration.

     
     

Upload Certificate

1. Log in to the Security CDN Console, and navigate to SSL/TLS from the left menu.
2. Click the Upload button on the certificate management page to open the upload window.
3. In the upload window, enter the Certificate Name, Certificate (Public Key), and Private Key, then click Save to complete the upload.

Field	Description
Certificate Name	4 - 50 Chinese characters, English letters, digits, and special characters. The certificate name must be unique.
Certificate Public Key	Usually, certificates are files with extensions such as.pem or.crt. When uploading a certificate, two methods are supported: manual input or file upload. 1 . Manual Input The certificate format starts with "-----BEGIN CERTIFICATE-----" and ends with "-----END CERTIFICATE-----". 2 . Upload File You can directly upload the certificate public - key file.
Certificate Private Key	Usually, certificate private keys are files with extensions such as.key or.pem. 1 . Manual Input The private - key format starts with "-----BEGIN (RSA) PRIVATE KEY-----" and ends with "-----END (RSA) PRIVATE KEY-----". 2 . Upload File You can directly upload the certificate private - key file. Please note: If the certificate private key is password - protected, please remove the password protection first.

Download Certificate

1. Log in to the Security CDN Console, and go to the SSL/TLS section.
2. To download a single certificate, click the Download button in the corresponding certificate row.
3. To download multiple certificates, select the checkboxes on the left, and click the Download button at the top.

Note: Certificates obtained via the free application process cannot be downloaded.

Associate Certificate

1. Log in to the Security CDN Console, and go to the SSL/TLS section.
2. Select the checkbox next to the certificate you wish to associate, then click the Associate button.
   • The system will automatically associate the certificate with domains that are both bound to the certificate and already added to Security CDN.

Edit Certificate

1. Log in to the Security CDN Console, and go to the SSL/TLS section.
2. Locate the certificate to edit, and click the Edit button in the corresponding row.
3. The editing process is identical to uploading a certificate.

Notes:

• Only uploaded (hosted) certificates can be edited.
• Purchased certificates cannot be modified.
• When editing a certificate, the new certificate must cover all domains in the original certificate.(e.g., *.demo.com must cover www.demo.com.)
  

Delete Certificate

1. Log in to the Security CDN Console, and go to the SSL/TLS section.
2. Select the checkbox next to the certificate you wish to delete, then click the Delete button at the top.

Note: Certificates currently bound to a service cannot be deleted.