User certificate

Certificate Manager lets you import certificates provided by third-party authorities and self-signed certificates. To import:

A self-signed certificate: Specify the certificate and its private key.
A certificate issued by a third-party certificate authority: Specify the certificate, its private key, and the intermediate certificate chain.

Supported cryptographic algorithms for creating private keys:

Certificate requirements

User certificate requirements:

The certificate must meet X.509 ver.3 standards.
The certificate must contain the public key, website domain name, and publisher information.
You only import valid certificates.

You can't import a certificate before it becomes valid or after its expiration date.
Make sure to decrypt the private key of the certificate.

You can't import a private key that is password-protected.
Import the certificate, intermediate certificate chain, and private key in PEM-encoded format.

Certificate Manager doesn't manage user certificates. To make your certificate continuously available to your resources, be sure to renew it on time.

To renew a certificate:

Get a new TLS certificate from a third-party certificate authority.
Renew the certificate.

All the resources that use the certificate will get its new version.