Yandex Cloud
  • Services
  • Solutions
  • Why Yandex Cloud
  • Pricing
  • Documentation
  • Contact us
Get started
Language / Region
© 2022 Yandex.Cloud LLC
Yandex Certificate Manager
  • Getting started
  • Step-by-step instructions
    • All instructions
    • Let's Encrypt® certificate
      • Create a certificate
      • Get the contents of a certificate
      • Domain rights check procedure
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • User certificate
      • Create a certificate
      • Get the contents of a certificate
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • Domain
      • Create a domain
      • Renew a domain certificate
      • Update a domain
      • Delete a domain
    • Backups
    • Adding alerts for certificates
  • Concepts
    • Overview
    • Let's Encrypt® certificate
    • User certificate
    • Check rights for domain
    • Integration with Yandex Cloud services
    • Quotas and limits
    • Domain
      • Overview
      • Integration with Yandex Cloud services
  • Access management
  • Pricing policy
  • API reference
    • Authentication in the API
    • gRPC
      • Overview
      • CertificateContentService
      • CertificateService
      • OperationService
    • REST
      • Overview
      • CertificateContent
        • Overview
        • get
      • Certificate
        • Overview
        • create
        • delete
        • get
        • list
        • listAccessBindings
        • listOperations
        • listVersions
        • requestNew
        • setAccessBindings
        • update
        • updateAccessBindings
  • Questions and answers
  1. Step-by-step instructions
  2. Let's Encrypt® certificate
  3. Domain rights check procedure

Check rights for domains

Written by
Yandex Cloud

    To check rights for domains:

    Management console
    CLI
    API
    1. In the management console, select the folder where the certificate was created.
    2. In the list of services, select Certificate Manager.
    3. Select the certificate to check from the list and click it.
    4. In the window that opens, the details you need to pass the domain rights check can be found under Check rights for domains. For more information, see Check rights for domain.
    5. When the domain rights check is passed, the domain check status under Check rights for domain changes to Valid.
    6. After the rights check status for all your domains changes to Valid, the certificate is issued and its status becomes Issued.

    If you don't have the Yandex Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the command:

      yc certificate-manager certificate get --help
      
    2. Run the command:

      yc certificate-manager certificate get \
        --id fpq6gvvm6piuegbb2nol \
        --full
      

      Where:

      • --id: Certificate ID.
      • --full: Show a list of active checks for domain rights.

      Result:

      id: fpq6gvvm6piuegbb2nol
      folder_id: b1g7gvsi89m34qmcm3ke
      created_at: "2020-09-15T08:49:11.533771Z"
      name: mymanagedcert
      type: MANAGED
      domains:
      - example.com
      status: VALIDATING
      updated_at: "2020-09-15T08:49:11.533771Z"
      challenges:
      - domain: example.com
        type: HTTP
        created_at: "2020-09-15T08:49:11.533771Z"
        updated_at: "2020-09-15T08:51:44.991065Z"
        status: PENDING
        message: Create a file in your web server's base directory.
        http_challenge:
          url: http://example.com/.well-known/acme-challenge/3LiH-nrTC7GdMbRgVqttEvdTODeNeaD0TtXteWgtAH8
          content: 3LiH-nrTC7GdMbRgVqttEvdTODeNeaD0TtXteWgtAH8.ZHCju15sJiKBwT8G5FTl7UtfmJWp1gKNYYPLcVtVL44
      
    3. The information required for passing the rights check for a domain can be found under http_challenge. For more information, see Check rights for domain.

    4. When the rights check for a domain is passed, the domain check status changes to Valid:

      yc certificate-manager certificate get --id fpq6gvvm6piuegbb2nol --full
      ...
      domains:
      - example.com
      status: VALID
      ...
      
    5. After the rights check status for all your domains changes to Valid, the certificate is issued and its status becomes Issued:

      yc certificate-manager certificate get --id fpq6gvvm6piuegbb2nol --full
      ...
      domains:
      - example.com
      status: ISSUED
      ...
      

    To get the information required to pass the rights check for a domain, use the get method for the Certificate resource with the view=FULL flag.

    Was the article helpful?

    Language / Region
    © 2022 Yandex.Cloud LLC