[{"data":1,"prerenderedAt":306},["ShallowReactive",2],{"blog-free-https-certificate-guide":3,"blog-nav":304},{"id":4,"title":5,"body":6,"cover":290,"dateModified":290,"datePublished":291,"description":192,"draft":292,"extension":293,"meta":294,"navigation":295,"path":296,"seo":297,"sitemap":298,"stem":299,"summary":300,"tags":301,"__hash__":303},"blog\u002Fblog\u002Ffree-https-certificate-guide.md","免费HTTPS证书在线申请教程：从申请到Nginx部署",{"type":7,"value":8,"toc":266},"minimark",[9,13,17,21,24,27,30,53,57,60,80,83,87,90,95,98,116,119,123,126,130,133,153,156,160,163,178,182,185,195,199,213,221,225,231,235,242,245,249,252,256,259,263],[10,11,12],"h2",{"id":12},"前言",[14,15,16],"p",{},"HTTPS已经成为现代网站的标配，它通过SSL\u002FTLS加密保护用户数据传输安全，同时也是搜索引擎排名的重要因素。本文将详细介绍如何在线免费申请HTTPS证书，并将其部署到Nginx服务器。",[10,18,20],{"id":19},"什么是在线申请https证书","什么是在线申请HTTPS证书？",[14,22,23],{},"在线申请HTTPS证书是指通过基于ACME协议的SSL证书服务平台，无需安装命令行工具，在网页上即可完成证书的申请、验证和下载。相比传统的certbot、acme.sh等命令行工具，在线申请更加直观，适合不熟悉命令行的用户。",[10,25,26],{"id":26},"申请前的准备工作",[14,28,29],{},"在开始申请之前，您需要准备以下内容：",[31,32,33,41,47],"ul",{},[34,35,36,40],"li",{},[37,38,39],"strong",{},"域名","：已注册并正常解析的域名（如 example.com）",[34,42,43,46],{},[37,44,45],{},"DNS管理权限","：能够添加DNS记录（TXT类型），用于域名所有权验证",[34,48,49,52],{},[37,50,51],{},"服务器","：一台已安装Nginx的服务器（用于部署证书）",[10,54,56],{"id":55},"第一步填写域名信息","第一步：填写域名信息",[14,58,59],{},"登录HiOFD SSL证书服务平台后，点击「申请证书」。在域名输入框中填写您需要保护的域名。支持以下类型：",[31,61,62,68,74],{},[34,63,64,67],{},[37,65,66],{},"单域名","：如 www.hiofd.com",[34,69,70,73],{},[37,71,72],{},"多域名","：如 hiofd.com, www.hiofd.com, ssl.hiofd.com",[34,75,76,79],{},[37,77,78],{},"通配符域名","：如 *.hiofd.com（保护所有子域名）",[14,81,82],{},"选择加密算法（推荐RSA 2048，兼容性最好），然后选择CSR生成方式——可以系统自动生成，也可以上传您自己生成的CSR文件。",[10,84,86],{"id":85},"第二步选择验证方式并完成验证","第二步：选择验证方式并完成验证",[14,88,89],{},"SSL证书需要验证您对域名的所有权，常用的验证方式有两种：",[91,92,94],"h3",{"id":93},"dns验证推荐","DNS验证（推荐）",[14,96,97],{},"系统会生成一条或多条TXT记录，您需要将该记录添加到域名的DNS解析中。具体操作：",[99,100,101,104,107,110,113],"ol",{},[34,102,103],{},"复制系统提供的主机记录和记录值",[34,105,106],{},"登录您的域名DNS管理面板（如阿里云、腾讯云DNS控制台）",[34,108,109],{},"添加对应的TXT类型的DNS记录",[34,111,112],{},"等待DNS生效（一般很快，一分钟之内，也可能需要几分钟）",[34,114,115],{},"点击「验证」按钮",[14,117,118],{},"如果您配置了云平台API凭证（如阿里云AccessKey），平台可以自动为您添加DNS记录，无需手动操作。",[91,120,122],{"id":121},"http验证","HTTP验证",[14,124,125],{},"系统会提供一个验证文件，您需要将该文件放到网站根目录下的指定路径。如果是nginx，你也可以按照提示直接复制nginx配置，直接配置上即可。HTTP验证适用于域名已指向服务器且服务器已在运行的情况。",[10,127,129],{"id":128},"第三步证书签发与下载","第三步：证书签发与下载",[14,131,132],{},"验证通过后，证书会在几分钟内自动签发。签发完成后，您可以下载证书文件。平台通常提供多种服务器格式的证书包：",[31,134,135,141,147],{},[34,136,137,140],{},[37,138,139],{},"Nginx","：包含 .pem（证书链）和 .key（私钥）文件",[34,142,143,146],{},[37,144,145],{},"Apache","：包含 .crt、.key 和 CA链文件",[34,148,149,152],{},[37,150,151],{},"Tomcat\u002FIIS","：提供 .pfx 格式",[14,154,155],{},"根据您的服务器类型选择对应的格式下载。",[10,157,159],{"id":158},"第四步部署到nginx服务器","第四步：部署到Nginx服务器",[14,161,162],{},"下载Nginx格式的证书包后，解压会得到两个文件：",[31,164,165,172],{},[34,166,167,171],{},[168,169,170],"code",{},"example.com.pem"," — 证书文件（包含完整证书链）",[34,173,174,177],{},[168,175,176],{},"example.com.key"," — 私钥文件",[91,179,181],{"id":180},"_41-上传证书到服务器","4.1 上传证书到服务器",[14,183,184],{},"将证书文件上传到服务器，建议放在Nginx配置目录下：",[186,187,193],"pre",{"className":188,"code":190,"language":191,"meta":192},[189],"language-bash","# 创建证书存放目录\nsudo mkdir -p \u002Fetc\u002Fnginx\u002Fcerts\u002F\n\n# 使用scp上传（在本地执行）\nscp example.com.pem example.com.key root@your-server:\u002Fetc\u002Fnginx\u002Fcerts\u002F\n","bash","",[168,194,190],{"__ignoreMap":192},[91,196,198],{"id":197},"_42-配置nginx","4.2 配置Nginx",[14,200,201,202,205,206,209,210,212],{},"编辑Nginx配置文件（通常在 ",[168,203,204],{},"\u002Fetc\u002Fnginx\u002Fnginx.conf"," 或",[168,207,208],{},"\u002Fusr\u002Flocal\u002Fnginx\u002Fconf\u002Fnginx.conf"," 或 ",[168,211,204],{},"）：",[186,214,219],{"className":215,"code":217,"language":218,"meta":192},[216],"language-nginx","server {\n    listen 443 ssl http2;\n    server_name example.com www.example.com;\n\n    ssl_certificate \u002Fetc\u002Fnginx\u002Fcerts\u002Fexample.com.pem;\n    ssl_certificate_key \u002Fetc\u002Fnginx\u002Fcerts\u002Fexample.com.key;\n\n    # 推荐的SSL安全配置\n    ssl_protocols TLSv1.2 TLSv1.3;\n    ssl_ciphers HIGH:!aNULL:!MD5;\n    ssl_prefer_server_ciphers on;\n    ssl_session_cache shared:SSL:10m;\n    ssl_session_timeout 10m;\n\n    location \u002F {\n        root \u002Fvar\u002Fwww\u002Fhtml;\n        index \u002Findex.html;\n    }\n}\n\n# HTTP自动跳转HTTPS\nserver {\n    listen 80;\n    server_name example.com www.example.com;\n    return 301 https:\u002F\u002F$host$request_uri;\n}\n","nginx",[168,220,217],{"__ignoreMap":192},[91,222,224],{"id":223},"_43-测试并重载nginx","4.3 测试并重载Nginx",[186,226,229],{"className":227,"code":228,"language":191,"meta":192},[189],"# 测试配置是否正确\nsudo nginx -t\n\n# 如果配置正确，重载Nginx\nsudo nginx -s reload\n",[168,230,228],{"__ignoreMap":192},[10,232,234],{"id":233},"验证https是否生效","验证HTTPS是否生效",[14,236,237,238,241],{},"打开浏览器访问 ",[168,239,240],{},"https:\u002F\u002Fexample.com","，如果看到地址栏显示锁形图标，说明HTTPS证书已正确部署。您也可以使用在线SSL检测工具检查证书配置是否完善。",[10,243,244],{"id":244},"常见问题",[91,246,248],{"id":247},"证书有效期是多久","证书有效期是多久？",[14,250,251],{},"通过ACME协议签发的免费DV证书有效期通常为90天。建议开启自动续签功能，平台会在证书到期前自动完成续签和部署。",[91,253,255],{"id":254},"申请通配符证书需要注意什么","申请通配符证书需要注意什么？",[14,257,258],{},"通配符证书（*.example.com）只能使用DNS验证方式，不支持HTTP验证。申请时请确保您有DNS管理权限。",[91,260,262],{"id":261},"部署后浏览器提示证书不受信任","部署后浏览器提示证书不受信任？",[14,264,265],{},"通常是因为证书链不完整。请确保下载的是包含完整证书链的.pem文件，而非单独的证书文件。",{"title":192,"searchDepth":267,"depth":268,"links":269},2,3,[270,271,272,273,274,278,279,284,285],{"id":12,"depth":267,"text":12},{"id":19,"depth":267,"text":20},{"id":26,"depth":267,"text":26},{"id":55,"depth":267,"text":56},{"id":85,"depth":267,"text":86,"children":275},[276,277],{"id":93,"depth":268,"text":94},{"id":121,"depth":268,"text":122},{"id":128,"depth":267,"text":129},{"id":158,"depth":267,"text":159,"children":280},[281,282,283],{"id":180,"depth":268,"text":181},{"id":197,"depth":268,"text":198},{"id":223,"depth":268,"text":224},{"id":233,"depth":267,"text":234},{"id":244,"depth":267,"text":244,"children":286},[287,288,289],{"id":247,"depth":268,"text":248},{"id":254,"depth":268,"text":255},{"id":261,"depth":268,"text":262},null,"2026-07-26",false,"md",{},true,"\u002Fblog\u002Ffree-https-certificate-guide",{"title":5,"description":192},{"loc":296},"blog\u002Ffree-https-certificate-guide","详细介绍如何在线免费申请HTTPS证书，并通过DNS验证完成域名所有权确认，最终将证书部署到Nginx服务器的完整流程。",[302],"HTTPS证书在线申请方法","yhJOkLYwKYBNMMvSHQXSPftQg1c8YhXsC0Yt6YgzuL0",[305],{"path":296,"title":5,"datePublished":291},1785051109035]