[{"data":1,"prerenderedAt":375},["ShallowReactive",2],{"docs-core-concepts":3,"docs-nav":338},{"id":4,"title":5,"body":6,"category":325,"dateModified":326,"datePublished":326,"description":313,"draft":327,"extension":328,"icon":329,"meta":330,"navigation":331,"order":314,"path":332,"seo":333,"sitemap":334,"stem":335,"summary":336,"__hash__":337},"docs\u002Fdocs\u002Fcore-concepts.md","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"type":7,"value":8,"toc":312},"minimark",[9,14,18,22,45,52,55,108,123,127,130,134,137,207,217,220,232,246,249,252,274,284,288,291,305],[10,11,13],"h2",{"id":12},"ssltls-证书是什么","SSL\u002FTLS 证书是什么",[15,16,17],"p",{},"SSL\u002FTLS 证书用于在浏览器与服务器之间建立加密连接（即 HTTPS），保护数据传输安全，同时也是搜索引擎排名的重要因素。",[10,19,21],{"id":20},"验证级别dv-ov-ev","验证级别：DV \u002F OV \u002F EV",[23,24,25,33,39],"ul",{},[26,27,28,32],"li",{},[29,30,31],"strong",{},"DV（域名验证）","：仅验证域名所有权，签发快、可免费，适合绝大多数网站",[26,34,35,38],{},[29,36,37],{},"OV（组织验证）","：额外验证企业身份",[26,40,41,44],{},[29,42,43],{},"EV（扩展验证）","：最严格的企业身份验证",[15,46,47,48,51],{},"通过 ACME 协议签发的免费证书均为 ",[29,49,50],{},"DV 证书","，在加密强度和浏览器信任度上与付费 DV 证书完全一致。",[10,53,54],{"id":54},"证书覆盖范围",[23,56,57,67,83,98],{},[26,58,59,62,63],{},[29,60,61],{},"单域名证书","：只保护一个域名，如 ",[64,65,66],"code",{},"www.example.com",[26,68,69,72,73,76,77,76,80],{},[29,70,71],{},"多域名证书（SAN）","：一张证书保护多个域名，如 ",[64,74,75],{},"example.com","、",[64,78,79],{},"mysite.cn",[64,81,82],{},"other.net",[26,84,85,88,89,92,93],{},[29,86,87],{},"通配符证书","：",[64,90,91],{},"*.example.com"," 保护一个域名下的所有子域名，详见",[94,95,97],"a",{"href":96},"\u002Fdocs\u002Fwildcard","通配符证书申请",[26,99,100,103,104],{},[29,101,102],{},"IP 地址证书","：直接为公网 IP 签发 HTTPS 证书，适用于没有域名但需要加密的场景，详见 ",[94,105,107],{"href":106},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请",[109,110,111],"blockquote",{},[15,112,113,116,117,119,120,122],{},[29,114,115],{},"www + 主域名赠送规则","：同时填写 ",[64,118,66],{}," 和 ",[64,121,75],{}," 时，平台按单域名权限放行，无需开通多域名权益。",[10,124,126],{"id":125},"什么是-acme","什么是 ACME",[15,128,129],{},"ACME（Automatic Certificate Management Environment）是一套证书自动签发协议。HiOFD 基于 ACME 实现在线申请、自动验证、自动续签，无需你手动运行 certbot、acme.sh 等命令行工具。",[10,131,133],{"id":132},"证书颁发机构ca","证书颁发机构（CA）",[15,135,136],{},"平台支持 5 家免费 CA，各有特点：",[138,139,140,153],"table",{},[141,142,143],"thead",{},[144,145,146,150],"tr",{},[147,148,149],"th",{},"CA",[147,151,152],{},"特点",[154,155,156,168,178,188,198],"tbody",{},[144,157,158,165],{},[159,160,161,164],"td",{},[29,162,163],{},"Let's Encrypt","（推荐）",[159,166,167],{},"默认推荐：生态最成熟，唯一支持 IP 地址证书，支持通配符与多域名",[144,169,170,175],{},[159,171,172],{},[29,173,174],{},"Google Trust Services",[159,176,177],{},"Google 根证书，支持通配符与多域名；提供 GlobalSign 交叉签名备选链，老旧设备兼容更稳",[144,179,180,185],{},[159,181,182],{},[29,183,184],{},"ZeroSSL",[159,186,187],{},"支持通配符与多域名；可作其他 CA 限流或维护时的备选签发通道",[144,189,190,195],{},[159,191,192],{},[29,193,194],{},"SSL.com",[159,196,197],{},"仅支持单域名证书",[144,199,200,205],{},[159,201,202],{},[29,203,204],{},"Actalis",[159,206,197],{},[109,208,209],{},[15,210,211,212,216],{},"IP 地址证书目前仅 Let's Encrypt 支持，选择 IP 证书类型时其余 CA 会自动置灰。各 CA 的兼容性差异与选型建议见",[94,213,215],{"href":214},"\u002Fblog\u002Flets-encrypt-vs-google-trust-services","免费证书选型对比","。",[10,218,219],{"id":219},"证书有效期",[15,221,222,223,226,227,231],{},"ACME 签发的免费 DV 证书有效期通常为 ",[29,224,225],{},"90 天","，建议开启",[94,228,230],{"href":229},"\u002Fdocs\u002Fauto-renew","自动续签","避免到期中断。平台支持两种自动续签策略：",[23,233,234,240],{},[26,235,236,239],{},[29,237,238],{},"按月续签","：每月固定日期执行续签",[26,241,242,245],{},[29,243,244],{},"到期前续签","：证书到期前 N 天自动续签",[10,247,248],{"id":248},"域名所有权验证",[15,250,251],{},"申请证书时需要证明你对域名的控制权，平台支持两种验证方式：",[23,253,254,264],{},[26,255,256,259,260],{},[29,257,258],{},"DNS-01 验证","：在域名 DNS 中添加 TXT 记录，适用范围最广，通配符证书唯一支持的方式。详见 ",[94,261,263],{"href":262},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",[26,265,266,269,270],{},[29,267,268],{},"HTTP-01 验证","：在服务器指定路径放置验证文件，适用于域名已指向服务器的场景。详见 ",[94,271,273],{"href":272},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",[109,275,276],{},[15,277,278,279,283],{},"配置",[94,280,282],{"href":281},"\u002Fdocs\u002Fcloud-credential","云平台凭证","后，DNS 验证可全自动完成，也是自动续签的前提。",[10,285,287],{"id":286},"csr证书签名请求","CSR（证书签名请求）",[15,289,290],{},"CSR 是向 CA 提交证书申请时所需的加密文件，包含公钥和域名信息。平台支持两种方式：",[23,292,293,299],{},[26,294,295,298],{},[29,296,297],{},"系统自动生成","（推荐）：平台自动创建密钥对并生成 CSR，私钥由平台安全保管",[26,300,301,304],{},[29,302,303],{},"自定义上传","：使用自己生成的 CSR 和私钥，适用于对密钥管理有特殊要求的场景",[15,306,307,308,216],{},"详见 ",[94,309,311],{"href":310},"\u002Fdocs\u002Fcsr-management","CSR 管理指南",{"title":313,"searchDepth":314,"depth":315,"links":316},"",2,3,[317,318,319,320,321,322,323,324],{"id":12,"depth":314,"text":13},{"id":20,"depth":314,"text":21},{"id":54,"depth":314,"text":54},{"id":125,"depth":314,"text":126},{"id":132,"depth":314,"text":133},{"id":219,"depth":314,"text":219},{"id":248,"depth":314,"text":248},{"id":286,"depth":314,"text":287},"快速开始","2026-09-09",false,"md",null,{},true,"\u002Fdocs\u002Fcore-concepts",{"title":5,"description":313},{"loc":332},"docs\u002Fcore-concepts","快速理解 SSL\u002FTLS 证书、DV\u002FOV\u002FEV 验证级别、通配符与多域名证书、IP 地址证书、以及 ACME 自动化协议等核心概念。","-I0nzJWsAtAQpMSTGStvT1003TVsOhIENeANRX6H020",[339,343,347,350,353,354,357,360,363,367,368,371,372,374],{"path":229,"title":340,"category":341,"order":342},"SSL证书自动续签配置","部署与续签",5,{"path":344,"title":345,"category":341,"order":346},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":348,"title":349,"category":325,"order":315},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP",{"path":281,"title":351,"category":341,"order":352},"云平台凭证配置指南",6,{"path":332,"title":5,"category":325,"order":314},{"path":310,"title":355,"category":356,"order":342},"CSR 管理：在线生成与自定义上传","申请与验证",{"path":358,"title":359,"category":341,"order":315},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":361,"title":362,"category":341,"order":314},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":364,"title":365,"category":341,"order":366},"\u002Fdocs\u002Fdeploy-server","服务器部署客户端安装与使用",4,{"path":262,"title":263,"category":356,"order":346},{"path":369,"title":370,"category":325,"order":346},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":272,"title":273,"category":356,"order":314},{"path":106,"title":373,"category":356,"order":366},"IP 地址证书申请指南",{"path":96,"title":97,"category":356,"order":315},1789011271295]