[{"data":1,"prerenderedAt":229},["ShallowReactive",2],{"docs:\u002Fdocs\u002Fssl":3},{"id":4,"title":5,"body":6,"description":221,"extension":222,"meta":223,"navigation":224,"path":225,"seo":226,"stem":227,"__hash__":228},"docs\u002Fdocs\u002Fssl\u002Findex.md","申请流程详解",{"type":7,"value":8,"toc":212},"minimark",[9,19,23,46,50,58,94,107,115,119,122,132,138,145,148,152,155,183,196,199,209],[10,11,12,13,18],"p",{},"在 ",[14,15,17],"a",{"href":16},"\u002Fssl","申请页"," 提交一张证书申请后,平台按三个步骤推进。这一篇解释每一步背后发生了什么,帮助你判断「现在卡在哪、该做什么」。",[20,21,22],"h2",{"id":22},"流程总览",[24,25,26,34,40],"ol",{},[27,28,29,33],"li",{},[30,31,32],"strong",{},"填写域名与验证方式"," — 提交域名,系统分配验证记录。",[27,35,36,39],{},[30,37,38],{},"添加域名解析记录"," — 手动加 TXT,或系统自动代写。",[27,41,42,45],{},[30,43,44],{},"验证解析结果并下载证书"," — 校验通过,Let's Encrypt 签发,立刻下载。",[20,47,49],{"id":48},"第-1-步填写域名与验证方式","第 1 步:填写域名与验证方式",[10,51,52,53,57],{},"输入域名(支持裸域、子域,以及开头带一个 ",[54,55,56],"code",{},"*."," 的泛域名写法)后选择验证方式:",[59,60,61,74],"table",{},[62,63,64],"thead",{},[65,66,67,71],"tr",{},[68,69,70],"th",{},"验证方式",[68,72,73],{},"含义",[75,76,77,86],"tbody",{},[65,78,79,83],{},[80,81,82],"td",{},"手动解析(默认)",[80,84,85],{},"你到 DNS 控制台添加一条 TXT 记录,加完回来点校验",[65,87,88,91],{},[80,89,90],{},"系统自动解析",[80,92,93],{},"该域名已托管,解析记录由系统写入,你不用动 DNS",[95,96,99],"callout",{"title":97,"type":98},"验证方式是自动判定的","info",[10,100,101,102,106],{},"默认是手动解析;如果你填的域名已经配置过",[14,103,105],{"href":104},"\u002Fdocs\u002Fdeleg","域名托管",",系统会自动把它改成「系统自动解析」,不需要你手动选。",[10,108,109,110,114],{},"域名写法与限制(IP、知名站点等)见 ",[14,111,113],{"href":112},"\u002Fdocs\u002Fplatform\u002Flimits","申请范围与限制","。",[20,116,118],{"id":117},"第-2-步添加域名解析记录","第 2 步:添加域名解析记录",[10,120,121],{},"这一步的作用是「向 Let's Encrypt 证明这个域名归你管」。",[10,123,124,127,128,114],{},[30,125,126],{},"手动解析:"," 页面给出主机记录、完整名称、记录类型(TXT)、记录值四行,逐行复制到你的 DNS 控制台。填写细节见 ",[14,129,131],{"href":130},"\u002Fdocs\u002Fguide\u002Fmanual-dns","手动解析 TXT 指引",[10,133,134,137],{},[30,135,136],{},"系统自动解析:"," 页面只显示记录名称,不显示记录值 —— 值由系统直接写进这条记录,你只需要等待生效。等待期间申请页会显示等待状态,到可校验时间后校验按钮自动放开。",[95,139,142],{"title":140,"type":141},"托管域名看到手动指引要停手","danger",[10,143,144],{},"如果页面明确提示「该域名的解析由系统代写,手动添加 TXT 不会生效」,说明委托链已接管这个域名:此时手动加 TXT 会被 CNAME 带走、永远校验不过,请终止申请后重新申请。",[10,146,147],{},"这一步可以随时点「终止申请」放弃本次申请,不会产生任何残留影响。",[20,149,151],{"id":150},"第-3-步验证解析结果并下载证书","第 3 步:验证解析结果并下载证书",[10,153,154],{},"点击校验后,系统实时查询 DNS 记录:",[156,157,158,169],"ul",{},[27,159,160,163,164,168],{},[30,161,162],{},"查询不到或值不对"," — 提示验证失败,按 ",[14,165,167],{"href":166},"\u002Fdocs\u002Fssl\u002Fstates","申请状态与失败排查"," 处理,改对后重新申请即可。",[27,170,171,174,175,178,179,182],{},[30,172,173],{},"查询通过"," — 系统立即向 Let's Encrypt 发起签发,几秒到几十秒后证书下发,页面出现三个下载按钮:",[54,176,177],{},"fullchain.pem","、",[54,180,181],{},"privkey.pem","、全部压缩包。",[10,184,185,186,190,191,195],{},"签发成功后这条记录会出现在 ",[14,187,189],{"href":188},"\u002Frecord","签发记录页",",包含域名、验证方式、签发日志、到期时间,以及后续的下载与删除操作(见 ",[14,192,194],{"href":193},"\u002Fdocs\u002Fssl\u002Fdownload","证书下载与删除",")。",[20,197,198],{"id":198},"一次申请的完整状态流",[200,201,207],"pre",{"className":202,"code":204,"language":205,"meta":206},[203],"language-text","申请中(等待解析) → 校验通过 → 申请成功(证书可下载)\n      ↓                ↓\n    已取消          DNS 校验失败 \u002F 申请失败 \u002F 申请超时关闭\n","text","",[54,208,204],{"__ignoreMap":206},[10,210,211],{},"所有状态都会保留在签发记录里,失败的记录不影响下一次申请,也不占用任何资源。",{"title":206,"searchDepth":213,"depth":213,"links":214},3,[215,217,218,219,220],{"id":22,"depth":216,"text":22},2,{"id":48,"depth":216,"text":49},{"id":117,"depth":216,"text":118},{"id":150,"depth":216,"text":151},{"id":198,"depth":216,"text":198},"SSLee 证书申请三步流程每一步在做什么:填写域名与验证方式、添加解析记录、校验签发下载,以及验证方式的判定规则。","md",{},true,"\u002Fdocs\u002Fssl",{"title":5,"description":221},"docs\u002Fssl\u002Findex","aZMhCozuFJSb7RisdFkcdCpm2P-ZNy3HwKKPkjOjHRs",1793537574519]