[{"data":1,"prerenderedAt":370},["ShallowReactive",2],{"docs-auto-renew":3,"docs-nav":328},{"id":4,"title":5,"body":6,"category":314,"dateModified":315,"datePublished":315,"description":172,"draft":316,"extension":317,"icon":318,"meta":319,"navigation":320,"order":321,"path":322,"seo":323,"sitemap":324,"stem":325,"summary":326,"__hash__":327},"docs\u002Fdocs\u002Fauto-renew.md","SSL证书自动续签配置",{"type":7,"value":8,"toc":294},"minimark",[9,13,17,20,23,39,45,48,53,60,64,67,74,123,129,135,139,152,155,159,162,173,176,179,182,194,197,200,203,214,217,263,266,270,273,277,280,284,287,291],[10,11,12],"h2",{"id":12},"为什么需要自动续签",[14,15,16],"p",{},"ACME 签发的免费证书有效期通常为 90 天。手动续签既麻烦又容易遗忘，一旦过期会导致网站 HTTPS 中断、浏览器弹出安全警告。自动续签让证书全程免维护。",[10,18,19],{"id":19},"前提条件",[14,21,22],{},"自动续签依赖 DNS-01 验证自动完成，因此需要：",[24,25,26,36],"ol",{},[27,28,29,30,35],"li",{},"已配置有效的",[31,32,34],"a",{"href":33},"\u002Fdocs\u002Fcloud-credential","云平台凭证","（如阿里云 AccessKey），用于自动添加 DNS 验证记录",[27,37,38],{},"凭证对应的云账号拥有域名的 DNS 解析管理权限",[40,41,42],"blockquote",{},[14,43,44],{},"使用 HTTP-01 验证的证书（如 IP 地址证书）暂不支持全自动续签，需手动完成验证步骤。",[10,46,47],{"id":47},"配置步骤",[49,50,52],"h3",{"id":51},"_1-配置云平台凭证","1. 配置云平台凭证",[14,54,55,56,59],{},"进入控制台「证书管理 → 服务商凭证」，添加云厂商 API 凭证。详见",[31,57,58],{"href":33},"云平台凭证配置指南","。",[49,61,63],{"id":62},"_2-开启自动续签","2. 开启自动续签",[14,65,66],{},"在「证书列表」页，找到目标证书，点击操作列的「自动续签」按钮，打开配置抽屉：",[14,68,69,73],{},[70,71,72],"strong",{},"续签策略","（二选一）：",[75,76,77,93],"table",{},[78,79,80],"thead",{},[81,82,83,87,90],"tr",{},[84,85,86],"th",{},"策略",[84,88,89],{},"说明",[84,91,92],{},"适用场景",[94,95,96,110],"tbody",{},[81,97,98,104,107],{},[99,100,101],"td",{},[70,102,103],{},"按月续签",[99,105,106],{},"每月固定日期执行续签",[99,108,109],{},"希望固定时间窗口维护的用户",[81,111,112,117,120],{},[99,113,114],{},[70,115,116],{},"到期前续签",[99,118,119],{},"证书到期前 N 天自动续签",[99,121,122],{},"推荐，确保无缝衔接",[14,124,125,128],{},[70,126,127],{},"执行时间","：设置续签任务的具体执行时刻（时:分）。",[14,130,131,134],{},[70,132,133],{},"关联凭证","：选择用于自动 DNS 验证的云平台凭证。",[49,136,138],{"id":137},"_3-配置自动部署可选","3. 配置自动部署（可选）",[14,140,141,142,146,147,151],{},"如果证书已配置",[31,143,145],{"href":144},"\u002Fdocs\u002Fdeploy-server","部署规则","或",[31,148,150],{"href":149},"\u002Fdocs\u002Fdeploy-cloud","云平台部署","，续签成功后会自动触发部署，将新证书推送到服务器或云平台。",[14,153,154],{},"无需额外配置——首次通过部署向导完成部署后，系统自动保存部署配置，续签时复用。",[10,156,158],{"id":157},"续签流程自动","续签流程（自动）",[14,160,161],{},"配置完成后，平台在到期前自动执行：",[163,164,169],"pre",{"className":165,"code":167,"language":168},[166],"language-text","定时任务触发\n  → 校验云平台凭证有效性\n  → 向 CA 创建续签订单\n  → 自动写入 DNS 验证记录（通过云 API）\n  → 等待 CA 验证通过\n  → 签发新证书\n  → 自动部署到关联的服务器\u002F云平台（如有配置）\n  → 计算并注册下一次续签时间\n","text",[170,171,167],"code",{"__ignoreMap":172},"",[14,174,175],{},"全程无需人工干预。",[10,177,178],{"id":178},"手动续签",[14,180,181],{},"如果需要在自动续签之前手动触发（如证书即将到期但自动任务尚未执行），在证书列表点击「更多 → 续签」：",[183,184,185,188,191],"ul",{},[27,186,187],{},"系统实时显示续签进度（流式进度条）",[27,189,190],{},"可选择是否关联云平台凭证（关联则自动完成 DNS 验证）",[27,192,193],{},"续签选项：可设置「保持密钥不变」或「复用 CSR」",[14,195,196],{},"手动续签成功后，自动续签配置保持不变，下次仍按原计划执行。",[10,198,199],{"id":199},"续签失败处理",[14,201,202],{},"自动续签失败时，平台会：",[24,204,205,208,211],{},[27,206,207],{},"发送通知邮件提醒",[27,209,210],{},"在证书列表显示续签失败状态",[27,212,213],{},"自动重试（连续失败 3 次后标记为超限）",[14,215,216],{},"常见失败原因：",[75,218,219,229],{},[78,220,221],{},[81,222,223,226],{},[84,224,225],{},"原因",[84,227,228],{},"解决方法",[94,230,231,239,247,255],{},[81,232,233,236],{},[99,234,235],{},"云平台凭证过期\u002F失效",[99,237,238],{},"更新凭证 AccessKey",[81,240,241,244],{},[99,242,243],{},"DNS 解析权限变更",[99,245,246],{},"确认凭证仍有域名解析管理权限",[81,248,249,252],{},[99,250,251],{},"域名 DNS 服务商变更",[99,253,254],{},"更新凭证为新的 DNS 服务商",[81,256,257,260],{},[99,258,259],{},"CA 签发限频",[99,261,262],{},"等待限频窗口过后自动重试",[10,264,265],{"id":265},"常见问题",[49,267,269],{"id":268},"自动续签会中断网站服务吗","自动续签会中断网站服务吗？",[14,271,272],{},"不会。续签过程在后台完成，新证书签发后通过部署客户端或云 API 无缝替换，网站服务不中断。",[49,274,276],{"id":275},"续签后证书域名会变吗","续签后证书域名会变吗？",[14,278,279],{},"不会。续签沿用原证书的域名列表，签发一张新的 90 天有效期证书替换旧证书。",[49,281,283],{"id":282},"可以修改自动续签的执行时间吗","可以修改自动续签的执行时间吗？",[14,285,286],{},"可以。随时在证书列表点击「自动续签」重新配置执行策略和时间。",[49,288,290],{"id":289},"多张证书可以共用同一个云平台凭证吗","多张证书可以共用同一个云平台凭证吗？",[14,292,293],{},"可以。一个凭证可以关联多张证书的自动续签，只要凭证对应的云账号拥有所有域名的 DNS 解析权限。",{"title":172,"searchDepth":295,"depth":296,"links":297},2,3,[298,299,300,305,306,307,308],{"id":12,"depth":295,"text":12},{"id":19,"depth":295,"text":19},{"id":47,"depth":295,"text":47,"children":301},[302,303,304],{"id":51,"depth":296,"text":52},{"id":62,"depth":296,"text":63},{"id":137,"depth":296,"text":138},{"id":157,"depth":295,"text":158},{"id":178,"depth":295,"text":178},{"id":199,"depth":295,"text":199},{"id":265,"depth":295,"text":265,"children":309},[310,311,312,313],{"id":268,"depth":296,"text":269},{"id":275,"depth":296,"text":276},{"id":282,"depth":296,"text":283},{"id":289,"depth":296,"text":290},"部署与续签","2026-09-09",false,"md",null,{},true,5,"\u002Fdocs\u002Fauto-renew",{"title":5,"description":172},{"loc":322},"docs\u002Fauto-renew","免费证书 90 天有效期，如何配置自动续签与自动部署，实现证书全生命周期免维护，告别到期焦虑。","Np2Oz9D_NMknm3q-RdhY6KvQHjTvM_pqCUuWrB7dD0w",[329,330,334,338,340,343,347,349,352,355,358,361,364,367],{"path":322,"title":5,"category":314,"order":321},{"path":331,"title":332,"category":314,"order":333},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":335,"title":336,"category":337,"order":296},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":33,"title":58,"category":314,"order":339},6,{"path":341,"title":342,"category":337,"order":295},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":344,"title":345,"category":346,"order":321},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传","申请与验证",{"path":149,"title":348,"category":314,"order":296},"一键部署到阿里云 CDN\u002FESA",{"path":350,"title":351,"category":314,"order":295},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":144,"title":353,"category":314,"order":354},"服务器部署客户端安装与使用",4,{"path":356,"title":357,"category":346,"order":333},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":359,"title":360,"category":337,"order":333},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":362,"title":363,"category":346,"order":295},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":365,"title":366,"category":346,"order":354},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":368,"title":369,"category":346,"order":296},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]