How long does it take to issue an SSL certificate?

  • 15,000
  • Tác giả: admin
  • Ngày đăng:
  • Lượt xem: 15
  • Tình trạng: Còn hàng

The time required lớn issue a new SSL certificate depends on many factors. The SSL certificate type, the validation process, and how quickly you respond with requested information from us or the certificate authority communications.

Standard certificates

For standard single-name and wildcard certificates, it can take from a minimum of one hour lớn several hours, after you approve the SSL certificate.

Occasionally, the issuance may take longer and require up lớn several days. This is the case when some issue occurs during the issuance or validation. Common issues are:

  • misconfiguration of the domain
  • CAA records preventing the validation and issuance
  • issues in the gmail approval

Remember lớn approve the certificate!

In most cases, the purchase process can get stuck because the certificate is never approved by the owner. Once you submit the certificate, please monitor the approval gmail inbox and make sure lớn click on the links contained in the gmail sent from the Certificate Authority in order lớn validate and approve the certificate. Be sure lớn monitor your spam thư mục in case these emails are accidentally marked as spam.

Sectigo Wildcard Certificates and CAA

Customers who purchase a Sectigo wildcard certificate from us need lớn make sure they have both issuewild and issue CAA records, because they add an additional single-name lớn the certificate lớn cover the non-wildcard name.

For example, buying a certificate for *.example.com issues a certificate with both example.com and *.example.com in the certificate names. This means you need lớn configure your CAA records:

example.com.  CAA 0 issue "sectigo.com"
example.com.  CAA 0 issuewild "sectigo.com"

The above rules also apply lớn subdomain wildcard certificates.

Let’s Encrypt certificates

For Let’s Encrypt certificates the issuance is generally between 30 minutes and 1 hour.

If the order is taking longer, it is generally because of a possible issuance problem such as:

  • misconfiguration of the domain
  • misconfiguration of DNSSEC for the domain
  • CAA records preventing the issuance