Purchasing, Downloading, and Uploading Your Own SSL Certificate
When configuring a custom domain with your own certificate, you need to first purchase or apply for an SSL certificate, then download the Nginx-format certificate package, and finally upload the certificate file and private key file in the Polyv backend.
Before You Begin
Before purchasing or uploading a certificate, please confirm:
- You can log in to the certificate service provider's backend.
- You have confirmed the custom domain that needs to be configured in the Polyv backend.
- If you already have a certificate, please confirm it has not expired and that the domain bound to the certificate matches the custom domain entered in the Polyv backend.
Common Certificate Service Provider Portals
If the certificate is issued or managed by a cloud service provider, you can download the certificate file from the SSL certificate management page of the corresponding platform. When downloading, please select the Nginx-format certificate package.
| Platform | Portal or Help Document | Description |
|---|---|---|
| Alibaba Cloud Digital Certificate Management Service | Download SSL Certificate to Local | Applicable when applying for or managing SSL certificates on Alibaba Cloud |
| Tencent Cloud SSL Certificate | Tencent Cloud SSL Certificate Download Document | Applicable when applying for or managing SSL certificates on Tencent Cloud |
| Huawei Cloud Certificate Manager Service | Huawei Cloud Certificate Download Document | Applicable when applying for or managing SSL certificates on Huawei Cloud |
1. Purchase or Apply for an SSL Certificate
If you do not yet have an SSL certificate for your custom domain, you can first purchase or apply for a certificate on the certificate service provider's backend. In most cases, you can complete the purchase on a domain registrar, cloud service provider, or certificate service provider platform.
When purchasing or applying, please confirm the following information:
| Information | Instructions for Filling or Selection |
|---|---|
| Certificate Bound Domain | Enter the custom domain to be configured in the Polyv backend, e.g., live.example.com |
| Certificate Type | Select an SSL certificate that supports HTTPS access; if there are no special security or compliance requirements, a Domain Validation (DV) certificate is usually sufficient |
| Number of Domains | Use a single-domain certificate for a single domain; choose a wildcard certificate as needed for multiple subdomains at the same level |
| Validity Period | Select based on actual needs. The certificate must be repurchased or renewed before expiration, and updated in the Polyv backend |
| Domain Validation Method | Complete domain validation as required by the certificate service provider; common methods include DNS validation and file validation |
The general operation process is as follows:
- Log in to the certificate service provider's backend.
- Navigate to the SSL Certificate or Digital Certificate management page.
- Select Purchase, Apply, or Create Certificate.
- Enter the custom domain to be bound.
- Select the certificate type, specification, and validity period.
- Complete the purchase or submit the application as prompted on the page.
- Complete domain validation as required by the certificate service provider.
- Wait for the certificate to be issued. Once the certificate status changes to "Issued", download the Nginx-format certificate package.
If the certificate service provider offers a free test certificate, please confirm its validity period and usage restrictions. When using your own certificate, you must update it yourself before it expires.
2. Download the Nginx-Format Certificate Package
- Log in to the certificate service provider's backend.
- Navigate to the SSL Certificate or Certificate Management page.
- Find the certificate to be used for the custom domain.
- Click the Download or Deploy related entry.
- Select Nginx format to download the certificate package.
- Unzip the certificate package after downloading.
File Description
| File Type | Common Formats | Purpose |
|---|---|---|
| Certificate File | .pem, .crt |
Used to prove the domain certificate information |
| Private Key File | .key |
Used to match the certificate file for HTTPS access |
3. Upload to the Polyv Backend
In the configuration process, select [Use Your Own Certificate], then upload the following as prompted on the page:
- Certificate file
- Private key file
The certificate file and private key file must be uploaded together. You cannot proceed to the next step if the files are not fully uploaded.
Notes
- The uploaded certificate must match the custom domain currently being configured.
- The private key file must match the certificate file.
- Expired certificates cannot be used for configuration.
- It is not recommended to manually modify the content of the certificate file or private key file.
- If the certificate package contains multiple files, please prioritize the certificate file and private key file in the Nginx-format directory.
- When using your own certificate, you must update it yourself before it expires.
