AlphaSSL universal domain name certificate

CSR

KEY

If you encounter problems related to domain name record resolution, please check whether the DNSSEC configuration of the domain name registrar and the DNSSEC configuration of the domain name resolution provider are turned on or off at the same time

If the domain name resolution service provider is Cloudflare, make sure to disable the Universal SSL service If there is a DNSSEC problem, disable the HSTS service

Delete all CAA resolution records or add CAA resolution records with the value of 0 issuewild "globalsign. com", otherwise the certificate may not be issued successfully (Mandatory)

Pause parsing CNAME records, or you may not receive the certificate confirmation email (Mandatory)

If you apply for a certificate for the primary domain, you only need to pause CNAME resolution for the primary domain It is not necessary to pause CNAME resolution of subdomains

Please apply for Chinese domain name by transcoding to xn -- example. com

Modify the A record of the domain name to be applied for certificate to 69.175.0.0 (required, it can be changed back immediately after successful submission, and the main domain name is generally @)

Modify the MX record of the domain name of the certificate to be applied for (it can be changed back immediately after obtaining the certificate, and the main domain name is generally @)

Resolve MX record to specified record weight 10

If there are other MX records to pause, only this MX record will be retained

Wait for MX records to take effect (use 8.8.8.8 to query, and wait as many seconds as the TTL settings before changing)


    

Certificate