[{"data":1,"prerenderedAt":428},["ShallowReactive",2],{"docs-cert-download":3,"docs-nav":387},{"id":4,"title":5,"body":6,"category":373,"dateModified":374,"datePublished":375,"description":359,"draft":376,"extension":377,"icon":374,"meta":378,"navigation":379,"order":380,"path":381,"seo":382,"sitemap":383,"stem":384,"summary":385,"__hash__":386},"docs\u002Fdocs\u002Fcert-download.md","证书下载与格式说明",{"type":7,"value":8,"toc":358},"minimark",[9,13,17,20,166,169,174,177,193,202,206,209,227,230,234,240,269,275,279,285,288,324,328,341],[10,11,12],"h2",{"id":12},"下载入口",[14,15,16],"p",{},"证书签发成功后，在控制台「证书列表」页找到对应证书，点击操作列「更多 → 下载」，选择服务器格式即可下载证书包。",[10,18,19],{"id":19},"支持的服务器格式",[21,22,23,39],"table",{},[24,25,26],"thead",{},[27,28,29,33,36],"tr",{},[30,31,32],"th",{},"格式",[30,34,35],{},"包含文件",[30,37,38],{},"适用服务器",[40,41,42,65,88,104,119,135,149],"tbody",{},[27,43,44,51,62],{},[45,46,47],"td",{},[48,49,50],"strong",{},"Nginx",[45,52,53,57,58,61],{},[54,55,56],"code",{},".pem","（证书+完整链）+ ",[54,59,60],{},".key","（私钥）",[45,63,64],{},"Nginx、OpenResty、Tengine",[27,66,67,72,85],{},[45,68,69],{},[48,70,71],{},"Apache",[45,73,74,77,78,80,81,84],{},[54,75,76],{},".crt","（证书）+ ",[54,79,60],{},"（私钥）+ ",[54,82,83],{},"ca.crt","（CA 链）",[45,86,87],{},"Apache httpd",[27,89,90,95,101],{},[45,91,92],{},[48,93,94],{},"Tomcat",[45,96,97,100],{},[54,98,99],{},".pfx","（PKCS#12，含证书+私钥+链）",[45,102,103],{},"Tomcat、Java 应用",[27,105,106,111,116],{},[45,107,108],{},[48,109,110],{},"IIS",[45,112,113,115],{},[54,114,99],{},"（PKCS#12）",[45,117,118],{},"Windows IIS",[27,120,121,126,133],{},[45,122,123],{},[48,124,125],{},"Caddy",[45,127,128,130,131],{},[54,129,56],{}," + ",[54,132,60],{},[45,134,125],{},[27,136,137,142,147],{},[45,138,139],{},[48,140,141],{},"HAProxy",[45,143,144,146],{},[54,145,56],{},"（证书+链+私钥合并）",[45,148,141],{},[27,150,151,156,163],{},[45,152,153],{},[48,154,155],{},"其他",[45,157,158,130,160,162],{},[54,159,56],{},[54,161,60],{},"（通用 PEM 格式）",[45,164,165],{},"其他支持 PEM 的服务",[10,167,168],{"id":168},"各格式文件说明",[170,171,173],"h3",{"id":172},"nginx-caddy-格式","Nginx \u002F Caddy 格式",[14,175,176],{},"下载后解压得到两个文件：",[178,179,180,187],"ul",{},[181,182,183,186],"li",{},[54,184,185],{},"example.com.pem"," — 证书文件（含完整证书链：服务器证书 + 中间 CA 证书）",[181,188,189,192],{},[54,190,191],{},"example.com.key"," — 私钥文件",[14,194,195,196,201],{},"Nginx 配置示例见 ",[197,198,200],"a",{"href":199},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署指南","。",[170,203,205],{"id":204},"apache-格式","Apache 格式",[14,207,208],{},"下载后解压得到三个文件：",[178,210,211,217,222],{},[181,212,213,216],{},[54,214,215],{},"example.com.crt"," — 服务器证书",[181,218,219,221],{},[54,220,191],{}," — 私钥",[181,223,224,226],{},[54,225,83],{}," — CA 中间证书链",[14,228,229],{},"Apache 配置中需分别指定三个文件路径。",[170,231,233],{"id":232},"tomcat-iis-格式pfx","Tomcat \u002F IIS 格式（PFX）",[14,235,236,237,239],{},"下载得到单个 ",[54,238,99],{}," 文件（PKCS#12 格式），内含证书、私钥和完整证书链。",[178,241,242,261],{},[181,243,244,246,247,250,251,254,255,257,258],{},[48,245,94],{},"：在 ",[54,248,249],{},"server.xml"," 中配置 ",[54,252,253],{},"keystoreFile"," 指向 ",[54,256,99],{},"，",[54,259,260],{},"keystoreType=\"PKCS12\"",[181,262,263,265,266,268],{},[48,264,110],{},"：在 IIS 管理器中「导入证书」，选择 ",[54,267,99],{}," 文件",[270,271,272],"blockquote",{},[14,273,274],{},"PFX 文件可能带有密码保护，下载时请注意保存密码信息。",[170,276,278],{"id":277},"haproxy-格式","HAProxy 格式",[14,280,281,282,284],{},"下载得到单个合并的 ",[54,283,56],{}," 文件，内含证书链和私钥（按顺序拼接），直接在 HAProxy 配置中引用即可。",[10,286,287],{"id":287},"下载后注意事项",[178,289,290,299,308,314],{},[181,291,292,295,296,298],{},[48,293,294],{},"私钥安全","：",[54,297,60],{}," 文件是证书的核心机密，切勿泄露、上传到代码仓库或发送给他人",[181,300,301,304,305,307],{},[48,302,303],{},"完整证书链","：部署时务必使用包含完整证书链的文件（如 Nginx 的 ",[54,306,56],{},"），否则浏览器可能提示「证书不受信任」",[181,309,310,313],{},[48,311,312],{},"备份","：建议将证书文件备份到安全位置，以便服务器故障时快速恢复",[181,315,316,319,320],{},[48,317,318],{},"有效期","：免费 DV 证书有效期 90 天，到期前需续签并重新部署，建议开启",[197,321,323],{"href":322},"\u002Fdocs\u002Fauto-renew","自动续签",[10,325,327],{"id":326},"自动部署免手动下载","自动部署（免手动下载）",[14,329,330,331,335,336,340],{},"如果你配置了",[197,332,334],{"href":333},"\u002Fdocs\u002Fdeploy-server","部署客户端","或",[197,337,339],{"href":338},"\u002Fdocs\u002Fcloud-credential","云平台凭证","，证书签发\u002F续签后可自动部署到服务器或云平台，无需手动下载和上传。",[178,342,343,350],{},[181,344,345,346,349],{},"服务器部署：在证书列表点击「部署」，通过",[197,347,348],{"href":333},"部署向导","一键完成",[181,351,352,353,357],{},"云平台部署：在证书列表点击「部署」，选择",[197,354,356],{"href":355},"\u002Fdocs\u002Fdeploy-cloud","阿里云 CDN\u002FESA"," 等云产品直接替换",{"title":359,"searchDepth":360,"depth":361,"links":362},"",2,3,[363,364,365,371,372],{"id":12,"depth":360,"text":12},{"id":19,"depth":360,"text":19},{"id":168,"depth":360,"text":168,"children":366},[367,368,369,370],{"id":172,"depth":361,"text":173},{"id":204,"depth":361,"text":205},{"id":232,"depth":361,"text":233},{"id":277,"depth":361,"text":278},{"id":287,"depth":360,"text":287},{"id":326,"depth":360,"text":327},"部署与续签",null,"2026-09-09",false,"md",{},true,1,"\u002Fdocs\u002Fcert-download",{"title":5,"description":359},{"loc":381},"docs\u002Fcert-download","SSL 证书签发后如何下载？Nginx、Apache、Tomcat、IIS、Caddy 等各服务器格式的证书文件结构与下载方法。","JWHCioKSK8iME8JOsTNRPvTdg_-MjRRXrMAnEMi5ZQM",[388,391,392,396,399,402,406,408,410,413,416,419,422,425],{"path":322,"title":389,"category":373,"order":390},"SSL证书自动续签配置",5,{"path":381,"title":5,"category":373,"order":380},{"path":393,"title":394,"category":395,"order":361},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":338,"title":397,"category":373,"order":398},"云平台凭证配置指南",6,{"path":400,"title":401,"category":395,"order":360},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":403,"title":404,"category":405,"order":390},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传","申请与验证",{"path":355,"title":407,"category":373,"order":361},"一键部署到阿里云 CDN\u002FESA",{"path":199,"title":409,"category":373,"order":360},"Nginx 部署 SSL 证书",{"path":333,"title":411,"category":373,"order":412},"服务器部署客户端安装与使用",4,{"path":414,"title":415,"category":405,"order":380},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":417,"title":418,"category":395,"order":380},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":420,"title":421,"category":405,"order":360},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":423,"title":424,"category":405,"order":412},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":426,"title":427,"category":405,"order":361},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]