All Products
Search

This Product

    Certificate Management Service:Download a root certificate

    Document Center

    Certificate Management Service:Download a root certificate

    Last Updated:Oct 25, 2024

    A root certificate is the trust anchor in a chain of trust and is used to verify the authenticity of all subordinate certificates that are issued from the certificate authority (CA) of the root certificate. For more information, see root certificate. For SSL certificates that are issued from trusted CAs, root certificates are pre-installed in mainstream web browsers, such as Google Chrome, Mozilla Firefox, and Microsoft Edge, operating systems such as Windows and macOS, and mobile devices that run mobile operating systems, such as iOS and Android. However, for clients such as apps, Java clients, browsers of earlier versions, and loT devices, you must manually download a root certificate of the same type as the server certificate and manually install the root certificate on the clients. This way, the clients can establish HTTPS connections with the server.

    Important

    After you install root certificates on clients, client-side verification can be implemented. However, other issues may occur due to various reasons, such as expired root certificates or policy changes. For example, clients may fail to access the web server, or the system may notify you that the connection established from a client is not secure.

    If you still want to install root certificates on apps or Java clients regardless of the risks, you can download and install the required root certificates. We recommend that you install the root certificates in the default Truststore of the clients and implement client-side verification by using the default Truststore. If you have questions, contact your account manager.

    The following list provides links to the root certificates that are supported by Alibaba Cloud. You can click the links to download root certificates based on the brands and types of your SSL certificates. For example, if you purchase a DigiCert organization validated (OV) SSL certificate, you must download the DigiCert OV root certificate.