Get started
Yandex Certificate Manager

Check rights for domains

Written by

    To check rights for domains:

    1. In the management console, select the folder where the certificate was created.
    2. In the list of services, select Certificate Manager.
    3. Select the certificate to check from the list and click it.
    4. In the window that opens, the details you need to pass the domain rights check can be found under Check rights for domains. For more information, see Check rights for domain.
    5. When the domain rights check is passed, the domain check status under Check rights for domain changes to Valid.
    6. After the rights check status for all your domains changes to Valid, the certificate is issued and its status becomes Issued.

    If you don't have the Yandex Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the command:

      yc certificate-manager certificate get --help

    2. Run the command:

      yc certificate-manager certificate get \
  --id fpq6gvvm6piuegbb2nol \
  --full

      Where:

      • --id: Certificate ID.
      • --full: Show a list of active checks for domain rights.

      Result:

      id: fpq6gvvm6piuegbb2nol
folder_id: b1g7gvsi89m34qmcm3ke
created_at: "2020-09-15T08:49:11.533771Z"
name: mymanagedcert
type: MANAGED
domains:
- example.com
status: VALIDATING
updated_at: "2020-09-15T08:49:11.533771Z"
challenges:
- domain: example.com
  type: HTTP
  created_at: "2020-09-15T08:49:11.533771Z"
  updated_at: "2020-09-15T08:51:44.991065Z"
  status: PENDING
  message: Create a file in your web server's base directory.
  http_challenge:
    url: http://example.com/.well-known/acme-challenge/3LiH-nrTC7GdMbRgVqttEvdTODeNeaD0TtXteWgtAH8
    content: 3LiH-nrTC7GdMbRgVqttEvdTODeNeaD0TtXteWgtAH8.ZHCju15sJiKBwT8G5FTl7UtfmJWp1gKNYYPLcVtVL44

    3. The information required for passing the rights check for a domain can be found under http_challenge. For more information, see Check rights for domain.

    4. When the rights check for a domain is passed, the domain check status changes to Valid:

      yc certificate-manager certificate get --id fpq6gvvm6piuegbb2nol --full
...
domains:
- example.com
status: VALID
...

    5. After the rights check status for all your domains changes to Valid, the certificate is issued and its status becomes Issued:

      yc certificate-manager certificate get --id fpq6gvvm6piuegbb2nol --full
...
domains:
- example.com
status: ISSUED
...

    To get the information required to pass the rights check for a domain, use the get method for the Certificate resource with the view=FULL flag.