Skip to main content

Key Concepts

Certificate Manager allows you to register and delete SSL certificates through a single unified interface, and consistently manage them across various services. The key concepts of the Certificate Manager service are as follows.

Certificate​

Users can register their SSL certificates to KakaoCloud and apply them to various services.
The following information is required when registering a certificate:

  • Private key: A private key paired with the certificate. It is used to decrypt encrypted communications. As it poses a significant security risk if exposed, it must be stored securely.
  • Certificate body: The issued certificate in PEM format.
  • Certificate chain (optional): A chain consisting of root and intermediate CA certificates. It is used by clients such as browsers to validate the trust path of the server certificate.

Certificate ID​

A unique identifier that is automatically generated when a certificate is registered.
This ID is used to reference the certificate within Certificate Manager or when applying the certificate to other cloud resources (e.g., Load Balancers, Kubernetes Engine). The ID remains unchanged until the certificate is deleted.

Domain​

The domain represents the network endpoint to which the certificate applies.
It defines the valid scope of the certificate.

Expiration date​

The date on which the certificate expires.
Once expired, TLS connections may fail or client browsers may display security warnings.
Certificate Manager allows you to renew or replace certificates before expiration to prevent service disruption.