Issue certificate

Available in Classic and VPC

This page describes the method and requirements for issuing a certificate.

Apply for certificate

To apply for a certificate:

1. From the NAVER Cloud Platform console, navigate to Menu > Services > Security > Certificate Manager.
2. Click the Certificate list menu.
3. Click [Issue certificate].
4. Select Certificate types. The certificates types issued by Certificate Manager are Cloud Basic and Advanced.

Cloud Basic certificate

When the Issue certificate interface appears, proceed with the following steps in order:

• 1. Enter domain
• 2. Validation method
• 3. Review and request
• 4. Subscription completed

1. Enter domain

Enter the certificate name and domain name.

• For Certificate name, enter a name that is different from other certificate names.
• These are types of domain names available for Domain name:
  * FQDN (Example: www.example.com)
  * Apex domain (Example: example.com)
  * Wild card domain (Example: *.example.com)

2. Validation method

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change it later.

• DNS validation: A method of validation if you have DNS editing permissions. For details, see DNS validation.

3. Review and request

Review the certificate information you applied for and the validation method.

• If you selected DNS validation, a validation value is created for entry in the DNS Record Type, Record Name, and Record Value after the application is complete. You can view the created validation value and validation status in the certificate details in the Certificate List.

4. Subscription completed

After the application is complete, the certificate status appears as In progress in the Certificate List.

Advanced certificate

When the Issue certificate interface appears, proceed with the following steps in order:

• 1. Enter domain
• 2. Enter organization information
• 3. Enter CSR
• 4. Select validation methods
• 5. Review and request
• 6. Subscription completed

1. Enter domain

Enter the certificate name and domain name.

• For Certificate name, enter a name that is different from other certificate names.
• These are types of domain names available for Domain name:
  * FQDN (Example: www.example.com)
  * Apex domain (Example: example.com)
  * Wild card domain (Example: *.example.com)

2. Enter organization information

Select organization information that will be included in the certificate.

• Only validated organization information can be viewed.
• You can add organizations in the Organizations menu.

3. Enter CSR

1. Copy and paste a CSR in PEM format.

   • The CN field must have the same domain name as the information entered into the domain.
   • For OV certificates, organization validation information must be entered correctly in the O, C, ST, and L fields.

2. Click the [Validate CSR] button to run validation. Validation must succeed to proceed to the next step.

4. Select validation methods

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change it later.

• DNS validation: A method of validation if you have DNS editing permissions. For details, see DNS validation.

5. Review and request

Review the certificate information you applied for and the validation method.

• If you selected DNS validation, a validation value is created for entry in the DNS Record Type, Record Name, and Record Value after the application is complete. You can view the created validation value and validation status in the certificate details in the Certificate List.

6. Subscription completed

After the application is complete, the certificate status appears as In progress in the Certificate List.

Conditions for a certificate issuance

If validation is performed and the validation status of all applied domains is Succeeded, the certificate will be issued. If issued successfully, the certificate status appears as Normal, and information such as issuance date, authentication start date, and authentication end date in the certificate details is updated.

Validation status

Validation status can be viewed in Certificate list > Certificate details.

Validation method

• If the validation method is DNS validation, 1 DNS validation value is created for each domain.
• After the certificate application is complete, Certificate Manager repeatedly checks for successful validation for 72 hours. If the validation for all domains you applied for succeeds, the validation status appears as Succeeded and the certificate is issued within minutes.
• If the validation does not succeed within 72 hours, the certificate status appears as Timeout and the certificate can no longer be issued. If the validation status is "Timeout", apply for a new certificate.