Exporting a Certificate Request File

This operation enables you to export a certificate request file. After signing the file, you can import a new certificate.

Context

Only super administrators and security administrators can export certificate request files.

Procedure

  1. Choose Settings > Certificate > Certificate Management.
  2. Select a desired certificate and click Export Request File.

    The Export Request File page is displayed on the right.

    Request files cannot be exported for SSO security certificate, DSwareTool security certificate, Object storage service maintenance API security certificate, Internal KMS certificate, Grafana service security certificate, and IAM security certificate.

  3. Select a certificate key algorithm from the Certificate Key Algorithm drop-down list to encrypt the request file to be exported.
  4. Select Advanced in the upper right corner and set advanced parameters for exporting the certificate request file.

    Table 1 describes the related parameters.

    Table 1 Advanced request file parameters

    Parameter

    Description

    Country

    Value of the country parameter in the subject field when a CSR file is generated. The default value is CN.

    State or Province

    Value of the state or province name parameter in the subject field when a CSR file is generated. There is no default value.

    City or Locality

    Value of the locality parameter in the subject field when a CSR file is generated. There is no default value.

    Organization

    Value of the organization parameter in the subject field when a CSR file is generated.

    Organization Unit

    Value of the organizational unit parameter in the subject field when a CSR file is generated. The default value is Storage.

    Common Name

    Value of the common name parameter in the subject field when a CSR file is generated. The default value is ESN.

    Subject Alternative Name

    The Subject Alternative Name extended field in the X509 standard for exporting a CSR file. The SSL certificate that uses the Subject Alternative Name field can extend the domain names supported by the certificate so that one certificate can support the resolution of multiple domain names.

  5. Click OK.