Yandex.Cloud
  • Services
  • Why Yandex.Cloud
  • Solutions
  • Pricing
  • Documentation
  • Contact us
Get started
Yandex Certificate Manager
  • Getting started
  • Step-by-step instructions
    • All instructions
    • Let's Encrypt® certificate
      • Create a certificate
      • Get the contents of a certificate
      • Domain rights check procedure
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • User certificate
      • Create a certificate
      • Get the contents of a certificate
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • Domain
      • Create a domain
      • Renew a domain certificate
      • Update a domain
      • Delete a domain
    • Backups
    • Adding alerts for certificates
  • Concepts
    • Overview
    • Let's Encrypt® certificate
    • User certificate
    • Check rights for domain
    • Integration with Yandex.Cloud services
    • Quotas and limits
    • Domain
      • Overview
      • Integration with Yandex.Cloud services
  • Access management
  • Pricing policy
  • API reference
    • Authentication in the API
    • gRPC
      • Overview
      • CertificateContentService
      • CertificateService
      • OperationService
    • REST
      • Overview
      • Certificate
        • Overview
        • create
        • delete
        • get
        • list
        • listAccessBindings
        • listOperations
        • requestNew
        • setAccessBindings
        • update
        • updateAccessBindings
      • CertificateContent
        • Overview
        • get
  • Questions and answers
  1. Step-by-step instructions
  2. User certificate
  3. Renew a certificate

Renew a certificate

    Certificate Manager doesn't manage user certificates. To make your certificate continuously available to your resources, be sure to renew it on time.

    To get a new version of a user certificate:

    Management console
    CLI
    API
    1. In the management console, select the folder where the certificate was created.
    2. In the list of services, select Certificate Manager.
    3. Select the certificate you want to renew in the list.
    4. In the window that opens, click Renew certificate.
    5. In the window that opens, click Add certificate in the Certificate field.
      1. Select how to add your certificate: File or Text.
      2. Click Add.
    6. In the Intermediate certificate chain field, click Add chain.
      1. Select how to add your certificate: File or Text.
      2. Click Add.
    7. In the Private key field, click Add private key.
      1. Select how to add your certificate: File or Text.
      2. Click Add.
    8. Click Create.

    If you don't have the Yandex.Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the command:

      yc certificate-manager certificate update --help
      
    2. View the list of certificates:

      yc certificate-manager certificate list
      +----------------------+--------+-------------+---------------------+----------+--------+
      |          ID          |  NAME  |   DOMAINS   |      NOT AFTER      |   TYPE   | STATUS |
      +----------------------+--------+-------------+---------------------+----------+--------+
      | fpqmg47avvimp7rvmp30 | mycert | example.com | 2021-09-15 06:48:26 | IMPORTED | ISSUED |
      +----------------------+--------+-------------+---------------------+----------+--------+
      
    3. Run the command:

      yc certificate-manager certificate update \
        --id fpqmg47avvimp7rvmp30 \
        --chain myupdatedcert.pem \
        --key myupdatedkey.pem
      

      Command parameters:

      • --id: ID of the certificate to renew.
      • --chain: Path to the new certificate chain file.
      • --key: Path to the file of the new certificate private key.

      Command results:

      id: fpqmg47avvimp7rvmp30
      folder_id: b1g7gvsi89m34qmcm3ke
      created_at: "2020-09-15T06:54:44.916Z"
      name: mycert
      type: IMPORTED
      domains:
      - example.com
      status: ISSUED
      issuer: CN=example.com
      subject: CN=example.com
      serial: 3df79e43df7c3868397b78bfc15a431fa942a135
      updated_at: "2020-09-15T08:23:50.147668Z"
      issued_at: "2020-09-15T08:23:50.147668Z"
      not_after: "2021-09-15T08:12:57Z"
      not_before: "2020-09-15T08:12:57Z"
      

    To update the certificate, use the update method for the Certificate resource.

    Language / Region
    Careers
    Privacy policy
    Terms of use
    Brandbook
    © 2021 Yandex.Cloud LLC