Issue a certificate

Available in Classic and VPC

You can issue a certificate by following the process and meeting the requirements below.

Apply for a certificate

To apply for a certificate:

1. In the NAVER Cloud Platform console, navigate to Menu > All Services > Security > Certificate Manager.
2. Click the menu for the type of certificate you want to issue.
   • Cloud Basic, Global Edge Dedicated: Cloud Certificate > Certificate List
   • Advanced DV, Advanced OV: Enterprise Certificate > Order List
3. Click [Issue certificate].
4. Select a certificate type. The issuance page displays only the certificate types available in the menu you opened. In Cloud Certificate, you can select Cloud Basic or Global Edge Dedicated. In Enterprise Certificate, you can select Advanced DV or Advanced OV.

Cloud Basic certificate

When the Issue certificate page appears, follow the steps in order:

• 1. Enter a domain
• 2. Validation methods
• 3. Review and request
• 4. Complete the application

1. Enter a domain

Enter the certificate name and domain name.

• For Certificate name, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
• The following domain name types are available for Domain name:
  • FQDN (e.g., www.example.com)
  • Apex domain (e.g., example.com)
  • Wildcard domain (e.g., *.example.com)

2. Validation methods

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change it later.

• DNS validation: A method of validation if you have DNS editing permissions. For details, see DNS validation.

3. Review and request

Review the certificate information you requested and the validation method.

• If you selected DNS validation, validation values for DNS Record Type, Record Name, and Record Value are generated after the application is complete. You can view the generated validation values and validation status in the certificate details in Certificate List.

4. Complete the application

After the application is complete, the certificate status appears as In progress in the Certificate List.

Advanced certificates

When the Issue certificate page appears, follow the steps in order:

• 1. Enter a domain
• 2. Enter organization information
• 3. Enter CSR
• 4. Select a validation method
• 5. Subscription period
• 6. Review and request
• 7. Complete the application

1. Enter a domain

Enter the certificate name and domain name.

• For Certificate name, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
• The following domain name types are available for Domain name:
  • FQDN (e.g., www.example.com)
  • Apex domain (e.g., example.com)
  • Wildcard domain (e.g., *.example.com)

2. Enter organization information

Select organization information that will be included in the certificate.

• Only validated organization information can be viewed.
• You can add organizations in the Organizations menu.

3. Enter CSR

1. Copy and paste a CSR in PEM format.

   • The CN field must have the same domain name as the domain entered.
   • For OV certificates, organization validation information must be entered correctly in the O, C, ST, and L fields.

2. Click [Validate CSR] to run validation. Validation must succeed to proceed to the next step.

4. Select a validation method

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change after application.

• DNS validation: Validates domain ownership when you have permission to edit DNS records. For details, see DNS validation.

5. Subscription period

Select the subscription period for the certificate you are applying for. Once you select a validation method at this stage, you cannot change after application. The differences between the subscription period and the certificate validity period are as follows:

6. Review and request

Review the certificate information you requested and the validation method.

• If you selected DNS validation, validation values for DNS Record Type, Record Name, and Record Value are generated after the application is complete. You can view the generated validation values and validation status in the certificate details in Certificate List.

7. Complete the application

After the application is complete, the certificate status appears as In progress in the Certificate List.

Conditions for certificate issuance

Certificate issuance begins once the validation status of all domains in the application is Succeeded. If issued successfully, the certificate status appears as Normal, and information such as issuance date, authentication start date, and authentication end date in the certificate details is updated.

Validation status

You can view the validation status in Certificate List > Certificate details.

Validation methods

• If the validation method is DNS validation, 1 DNS validation value is created for each domain.
• After the certificate application is complete, Certificate Manager repeatedly checks for successful validation for 72 hours. If the validation for all domains you applied for succeeds, the validation status appears as Succeeded and the certificate is issued within minutes.
• If validation does not succeed within 72 hours, the certificate status changes to Validation timeout, and certificate issuance cannot proceed. If validation times out, apply for a new certificate.