---
title: "Issue a certificate"
slug: "certificatemanager-issuecertificate"
tags: ["Security"]
updated: 2026-10-08T06:57:17Z
published: 2026-10-08T06:57:17Z
canonical: "guide.ncloud-docs.com/certificatemanager-issuecertificate"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Issue a certificate

Available in Classic and VPC

You can issue a certificate by following the process and meeting the requirements below.

## Apply for a certificate

To apply for a certificate:

1. In the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Certificate Manager**.
2. Click the menu for the type of certificate you want to issue.
  - **Cloud Basic**, **Global Edge Dedicated**: **Cloud Certificate** > **Certificate List**
  - **Advanced DV**, **Advanced OV**: **Enterprise Certificate** > **Order List**
3. Click **[Issue certificate]**.
4. Select a [certificate type](/docs/en/certificatemanager-cmissuedcertificate-feature#%EC%9D%B8%EC%A6%9D%EC%84%9C%ED%83%80%EC%9E%85). The issuance page displays only the certificate types available in the menu you opened. In **Cloud Certificate**, you can select **Cloud Basic** or **Global Edge Dedicated**. In **Enterprise Certificate**, you can select **Advanced DV** or **Advanced OV**.

### Cloud Basic certificate

When the Issue certificate page appears, follow the steps in order:

- [1. Enter a domain](/docs/en/certificatemanager-issuecertificate#1%EB%8F%84%EB%A9%94%EC%9D%B8%EC%9E%85%EB%A0%A5cloudbasic)
- [2. Validation methods](/docs/en/certificatemanager-issuecertificate#2%EA%B2%80%EC%A6%9D%EB%B0%A9%EC%8B%9Dcloudbasic)
- [3. Review and request](/docs/en/certificatemanager-issuecertificate#3%EA%B2%80%ED%86%A0%EB%B0%8F%EC%9A%94%EC%B2%ADcloudbasic)
- [4. Complete the application](/docs/en/certificatemanager-issuecertificate#4%EC%8B%A0%EC%B2%AD%EC%99%84%EB%A3%8Ccloudbasic)

#### 1. Enter a domain

Enter the certificate name and domain name.

- For **Certificate name**, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
- The following domain name types are available for **Domain name**:
  - FQDN (e.g., www.example.com)
  - Apex domain (e.g., example.com)
  - Wildcard domain (e.g., *.example.com)

#### 2. Validation methods

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change it later.

- **DNS validation**: A method of validation if you have DNS editing permissions. For details, see [DNS validation](/docs/en/certificatemanager-domainvalid-dns).

#### 3. Review and request

Review the certificate information you requested and the validation method.

- If you selected DNS validation, validation values for DNS Record Type, Record Name, and Record Value are generated after the application is complete. You can view the generated validation values and validation status in the certificate details in Certificate List.

#### 4. Complete the application

After the application is complete, the certificate status appears as **In progress** in the Certificate List.

### Advanced certificates

When the Issue certificate page appears, follow the steps in order:

- [1. Enter a domain](/docs/en/certificatemanager-issuecertificate#1%EB%8F%84%EB%A9%94%EC%9D%B8%EC%9E%85%EB%A0%A5advanced)
- [2. Enter organization information](/docs/en/certificatemanager-issuecertificate#2%EC%A1%B0%EC%A7%81%EC%A0%95%EB%B3%B4%EC%9E%85%EB%A0%A5advanced)
- [3. Enter CSR](/docs/en/certificatemanager-issuecertificate#3CSR%EC%9E%85%EB%A0%A5advanced)
- [4. Select a validation method](/docs/en/certificatemanager-issuecertificate#4%EA%B2%80%EC%A6%9D%EB%B0%A9%EC%8B%9D%EC%84%A0%ED%83%9Dadvanced)
- [5. Subscription period](/docs/en/certificatemanager-issuecertificate#5%EA%B5%AC%EB%8F%85%EA%B8%B0%EA%B0%84advanced)
- [6. Review and request](/docs/en/certificatemanager-issuecertificate#5%EA%B2%80%ED%86%A0%EB%B0%8F%EC%9A%94%EC%B2%ADadvanced)
- [7. Complete the application](/docs/en/certificatemanager-issuecertificate#6%EC%8B%A0%EC%B2%AD%EC%99%84%EB%A3%8Cadvanced)

#### 1. Enter a domain

Enter the certificate name and domain name.

- For **Certificate name**, enter a unique name. Enter 3-20 characters using only English letters, numbers, and hyphens (-).
- The following domain name types are available for **Domain name**:
  - FQDN (e.g., www.example.com)
  - Apex domain (e.g., example.com)
  - Wildcard domain (e.g., *.example.com)

#### 2. Enter organization information

              Note

              

The menu applies only to Advanced OV certificates. The menu doesn't appear in the Advanced DV certificate application.

Select organization information that will be included in the certificate.

- Only validated organization information can be viewed.
- You can add organizations in the [Organizations](/docs/en/certificatemanager-organizations) menu.

#### 3. Enter CSR

1. Copy and paste a CSR in PEM format.
  - The CN field must have the same domain name as the **domain entered**.
  - For OV certificates, **organization validation information** must be entered correctly in the O, C, ST, and L fields.
2. Click **[Validate CSR]** to run validation. Validation must succeed to proceed to the next step.

#### 4. Select a validation method

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change after application.

- **DNS validation**: Validates domain ownership when you have permission to edit DNS records. For details, see [DNS validation](/docs/en/certificatemanager-domainvalid-dns).

#### 5. Subscription period

Select the subscription period for the certificate you are applying for. Once you select a validation method at this stage, you cannot change after application. The differences between the subscription period and the certificate validity period are as follows:

| Type | Description |
| --- | --- |
| Subscription period | The certificate can be renewed and used throughout the subscription period. The subscription period is applied from the time the certificate is issued and does not apply during the issuance process. The selectable subscription period ranges from 1 year to 3 years. Charges are applied based on the subscription period selected at the time of certificate issuance. |
| Certificate validity period | The maximum validity period of an individual certificate is set by CA/B Forum policies. All public SSL/TLS certificate authorities (CAs), including those issuing certificates through Certificate Manager, must comply with these policies. Within the subscription period, the certificate can be renewed to extend its validity by issuing a new certificate. |

#### 6. Review and request

Review the certificate information you requested and the validation method.

- If you selected DNS validation, validation values for DNS Record Type, Record Name, and Record Value are generated after the application is complete. You can view the generated validation values and validation status in the certificate details in Certificate List.

#### 7. Complete the application

After the application is complete, the certificate status appears as **In progress** in the Certificate List.

## Conditions for certificate issuance

Certificate issuance begins once the validation status of **all domains in the application** is **Succeeded**. If issued successfully, the certificate status appears as **Normal**, and information such as issuance date, authentication start date, and authentication end date in the certificate details is updated.

              Note

              

Validation status types include **In progress**, **Succeeded**, **Timeout**, and **Failed**.

### Validation status

You can view the validation status in **Certificate List** > **Certificate details**.

| Validation status | Description |
| --- | --- |
| **In progress** | Validation values have been generated using the domain ownership validation method selected in the certificate request, and validation results are pending. |
| **Succeeded** | Domain ownership validation has succeeded. |
| **Timeout** | More than **72 hours** have passed in the **In progress** status. The domain ownership validation can no longer proceed after timeout. A new certificate issuance request is required. |
| **Failed** | Validation values could not be generated using the domain ownership validation method selected in the certificate request. This status can occur if an email cannot be sent for email validation or validation values cannot be generated for DNS validation. |

### Validation methods

- **If the validation method is [DNS validation](/docs/en/certificatemanager-domainvalid-dns)**, 1 DNS validation value is created for each domain.
- After the certificate application is complete, Certificate Manager repeatedly checks for successful validation for **72 hours**. If the validation for all domains you applied for succeeds, the validation status appears as **Succeeded** and the certificate is issued within minutes.
- If validation does not succeed within 72 hours, the certificate status changes to **Validation timeout**, and certificate issuance cannot proceed. If validation times out, apply for a new certificate.