平安云|Ping An Cloud- Building Your Smart Future

Certificate Format Requirements

ELB only supports certificates in PEM format. Before uploading a certificate, make sure that the format of your certificate content, certificate chain and private key meet the requirements. This article describes the format requirements for the certificate content, private key and certificate chain. Generally, there are two types of certificates: • Root certificate issued by CA Certification Center For the root certificate issued by CA Certification Center, the user gets a unique certificate, with which the user can be recognized as trusted by the browser and other access devices. • Certificate issued by intermediate certificate authority CA Certification Center issues certificates to intermediate certificate authority, and the intermediate certificate authorities issue certificates to other subordinate institutions or users. Therefore, a certificate chain will be formed. When verifying such certificates, the issuer's certificate will be traced back level by level until the root certificate is found. The certificates issued by the intermediate certificate authority will contain multiple files. It is necessary to upload the server certificate and intermediate certificate at the same time (the certificate chain.) Certificate Content Format Requirements • Begin with ------ BEGIN CERTIFICATE ----- and end with ------ END CERTIFICATE -----, which need to be uploaded together when uploading the certificate. • There are 64 characters in each line, and the length of the last line can be less than 64 characters. • The certificate content does not contain spaces or blank lines. The following figure is an example of a root certificate: <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607145745-1565abc997ce.png" style="height:177px; width:390px" /> Certificate Chain Format Requirements • The server certificate is placed first, and then the other intermediate certificates are placed level by level. • Each loop of certificate chain starts with ---- BEGIN CERTIFICATE ----- and ends with ---- END CERTIFICATE -----, which need to be uploaded together when uploading the certificate. • The certificate content does not contain spaces or blank lines. • Meet the certificate format requirements specified by the intermediate certificate authorities when they issuing the certificate. The following figure is an example of certificate chain: <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607145834-14ece0199548.png" style="height:521px; width:609px" /> Private Key Format Requirements • Begin with ------ BEGIN RSA PRIVATE KEY ----- and end with ------ END RSA PRIVATE KEY -----, which need to be uploaded together when uploading the certificate. • There are 64 characters in each line, and the length of the last line can be less than 64 characters. • The private key does not contain spaces or blank lines. The following picture is an example of private key:

Did the above content solve your problem? Yes No