Edge Security
  • Overview
  • DDoS Protection
    • DDoS Protection Overview
    • Exclusive DDoS Protection Usage
    • Configuration of Exclusive DDoS protection Rules
      • Increase DDoS Protection Level
      • Exclusive DDoS Traffic Alarm
      • Configuration IP blocklist/allowlist
      • Configuration Region Blocking Rule
      • Configuration Port Filtering
      • Configuration Features Filtering
      • Configuration Protocol Blocking Rule
      • Configuration Connections Attack Protection
      • Related References
        • Action
        • Related Concepts Introduction
  • Web Protection
    • Overview
    • Configuring Web Protection Policy
    • Managed rules
    • CC attack defense
    • Bandwidth Abuse Protection
    • Custom rule
    • Custom Rate Limiting Rules
    • Exception Rules
    • Managed Custom Rules
    • Web security monitoring alarm
    • Refer
      • Web Protection Request Processing Order
      • Action
      • Match Condition
  • Bot Management
    • Overview
    • Bot Intelligent analysis
    • Bot Basic Feature Management
    • Client Reputation
    • Active Detection
    • Custom Bot Rule
    • Bot Exception Rule
    • Related References
      • Action
  • Rules Template
  • IP and IP Segment Grouping
  • Origin Protection
  • Custom Response Page
  • Alarm Notification
  • SSL/TLS
    • Overview
    • Deploying/Updating SSL Certificate for A Domain Name
    • Configuring A Free Certificate for A Domain Name
    • Mutual Authentication
    • HTTPS Configuration
      • Forced HTTPS Access
      • Enabling HSTS
      • SSL/TLS Security Configuration
        • Configuring SSL/TLS Security
        • TLS Versions and Cipher Suites
      • Enabling OCSP Stapling
    • Refer
      • Using OpenSSL to Generate Self-Signed Certificates
      • Certificate Format Requirements
    • Using Keyless Certificate
Docs Overview/
Edge Security/
SSL/TLS/
Configuring A Free Certificate for A Domain Name/

Configuring A Free Certificate for A Domain Name

Overview

If you haven’t purchased an HTTPS certificate for the website, and the accelerated domain names do not contain any wildcard domain name, you can configure a free certificate.
Notes:
1. Free Certificates are issued by the TrustAsia and Let's Encrypt. If your site is currently accessed through NS, you can apply for a wildcard domain name certificate. If it is accessed through CNAME, EdgeOne only supports the application of single domain name certificates and does not support the application of wildcard domain name certificates.
2. The certificate has a validity period of 90 days. The platform will automatically apply for renewal before expiry, so there is no need for you to manually update it. If you are currently using NS access and switch to CNAME access, the applied wildcard domain name certificate will not be able to auto-renew upon expiration.
3. Free certificates do not support downloading.
4. If the domain is accessed via CNAME or DNSPod hosted access, you need to complete the CNAME configuration and wait for the CNAME status to take effect before applying for a free SSL certificate for the domain. In the CNAME or DNSPod hosted access mode, EO will apply for the free certificate through HTTP verification. During the verification process, the EO node will directly respond with the verification value. It is recommended to avoid using line/region-based resolution when configuring CNAME records, as this may lead to difficulties in obtaining the correct verification value, resulting in the failure of the free certificate application.

Directions

1. Log in to the EdgeOne console. Click the target site in the site list to display second-level menus for site management.
2. In the left sidebar, click Domain Name Service > Domain Management.
3. In the domain name list that appears, find the domain name for which the certificate is to be configured and click Edit in the HTTPS column of the domain name.

4. Set Certificate type to Free certificate and click OK. Then the free certificate is delivered and installed.
5. In the domain name list, hover over the icon before Configured in the record of the target domain name, and you can see the information of the deployed certificate.