Cloud Certificate Manager Service Statement

Cloud Certificate Manager Service Statement

This Service Statement (hereinafter referred to as "this Statement" and "this Agreement") describes your rights, obligations, and responsibilities of using Huawei Cloud services. Please read the terms carefully, especially the terms that have a significant impact on your rights and interests, such as exemption from liability and limitation of liability. Such terms are in bold in this Statement.

You understand and agree that by using any service in this Statement, you are deemed to have read and agree to the General Terms of Service in this Statement and the Dedicated Terms of Service for the service you use. This Statement shall become legally binding on you. If you do not agree to part or all of the terms of this Agreement, you shall stop using related services.

1. General Terms of Service

1.1 Contracting Entity

This Agreement is entered into by and between Sparkoo Technologies Ireland Co., Ltd. (or referred to as "Huawei Cloud", or "We") and you (or "User"). Once this Agreement takes effect, it has legal effect between you and Huawei Cloud. You acknowledge that you are a natural person, legal person, or organization that has full capacity for civil conduct, and may independently carry out civil juristic acts. If you do not have the preceding qualifications, do not use this Service. Otherwise, you and your guardian shall bear all consequences caused thereby. In addition, Huawei Cloud has the right to cancel (permanently freeze) your account and claim compensation from you and your guardian. In the event that you register on behalf of a company or other legal entity or use this Service in a manner permitted by Huawei Cloud, you represent and warrant that you have the right to make the company or legal entity bound by the terms of this Agreement.

1.2 Separate Agreement

If you subscribe to this Service offline, purchase this Service through our partners, or purchase partner products that integrate this Service, you may sign a separate agreement with us or our partners. You acknowledge and agree that you will remain bound by the separate agreement mentioned in this article if you are authorized to access and use this Service. If this Agreement conflicts with the separate agreement, the separate agreement shall prevail.

1.3 Agreement Update

This Agreement is subject to change. We will notify you of any changes to this Agreement by posting a notice on our website or by other means. You can also visit our website to read the latest service agreement. If you do not agree to part or all of the latest Agreement, please stop using this Service. By continuing to use this Service, you acknowledge that you are aware of and agree to the latest Statement.

1.4 Service Maintenance: We may maintain this Service from time to time through application upgrade, patch installation, or bug fixing. We will make our best, reasonable efforts to notify you of such maintenance events (except for emergency maintenance). You agree to make your best, reasonable efforts to comply with any notified cooperation requirements.

1.5 Your Content

1.5.1 The definition and related regulations of "Your Content" are subject to the Huawei Cloud Customer Agreement (

1.5.2 In terms of your content, except as required by laws and regulations or for your use of this Service, Huawei Cloud is entrusted to process your data only in accordance with your authorization and instructions and the agreement between you and us.

1.5.3 You have the right to upload, delete, and modify your content. Exercise caution when deleting or modifying data and bear the consequences of these operations.

1.5.4 You shall back up your data as required. Huawei Cloud provides data backup services only in accordance with relevant laws and regulations.

1.6 You are committed to being responsible for your end users. If your end users violate laws and regulations when using services related to this Agreement, or improperly use related services and cause damages to third parties or Huawei Cloud, you shall be liable for compensation.

1.7 Our Limited Warranty

1.7.1 The provision of a Huawei Cloud service is based on the availability status and product features of the cloud service at the time of provisioning, and does not constitute a commitment of Huawei Cloud to providing the cloud service for a long time after a certain lifecycle of the cloud service ends.

1.7.2 You understand and agree to our limited warranty in terms of the SLA in Clause 4.3 "Our Limited Warranty" of the Huawei Cloud Customer Agreement (

1.8 Statement by Both Parties

1.8.1 You understand and agree that your use of this Service must comply with applicable laws and regulations. We provide you with standard services only in accordance with your instructions and are not responsible for the legal compliance of your use of this Service. If we reasonably believe that you have violated laws, regulations, or the rights of third parties when using this Service, or violated the terms of related agreements (including Legal Statement, Privacy Statement, Acceptable Use Policy, Huawei Cloud Customer Agreement, and other agreements related to you on the Huawei Cloud official website) ("Prohibited Content"), we have the right to delete prohibited content, prohibit your use of related services and access to related content, or suspend services. In addition, you shall compensate for all losses caused to Huawei Cloud due to your faults.

1.8.2 Huawei Cloud provides O&M only for Huawei Cloud services. You shall ensure the security and stability of your network and devices. If any device fault or network interruption occurs due to your own or third-party reasons, you shall resolve the issue in a timely manner to avoid impact on Huawei Cloud services.

1.8.3 When the lifecycle of a specific cloud service product reaches the end of marketing (EOM), end of service and support (EOS), or end of all service activities, we will make our best commercial efforts to notify you. After reading and understanding the notification, you can agree to upgrade related services or migrate related services to updated software and hardware.

1.9 Disclaimer

1.9.1 You understand and agree that we are not liable if this Service is unavailable in the following situations:

1) Service unavailability or any legal consequences caused by your refusal to provide relevant information or the information provided does not meet service requirements

2) Service unavailability due to force majeure

3) Service unavailability due to your reasons or non-Huawei Cloud reasons

4) Service unavailability during regular service maintenance

1.9.2 You understand and agree that before the lifecycle of a specific cloud service reaches the end of all service activities, we will make our best commercial efforts to notify you. You need to migrate or upgrade related workloads within a certain time window based on the notification of Huawei Cloud. If you do not upgrade this Service to a new version available, you agree that Huawei Cloud has the right to automatically upgrade it when the right opportunity comes. We shall not be held liable for any potential service outage arising from the upgrade.

2. Terms of Service

2.1 Service Content

Cloud Certificate Manager (CCM) is provided by Huawei Cloud, and you can access and use CCM through the Huawei Cloud console or APIs.

CCM is a cloud service that provides one-stop lifecycle management of digital certificates. It provides SSL Certificate Manager (SCM) and Private Certificate Authority (PCA). SCM: Huawei Cloud cooperates with world-renowned Certificate Authorities (CAs) to issue SSL certificates for you. SCM provides a one-stop full-lifecycle management platform for SSL certificates. PCA manages private CAs and certificates. It provides a simple web UI so you can easily establish a complete CA hierarchy and use it to issue and manage private certificates for your internal businesses.

These functions and services may be optimized or modified by the service provider based on changing user needs or updated service version without any prior notification, or they may be suspended temporarily due to scheduled or unscheduled maintenance.

You are advised to carefully read the product help documentation on the Huawei Cloud website. Huawei Cloud will provide you with services based on the scope specified in this document.

Huawei Cloud is not responsible for any loss caused by reasons that are not related to Huawei Cloud, including but not limited to certificate defects and certificate cracking. However, Huawei Cloud will work with you to resolve any related issues with the corresponding CA.

2.2 Collection and Processing of Your Personal Data

You understand and agree that for the purpose of providing services, you agree to authorize us to collect and use your personal information, including the name, phone number, and email address of the certificate applicant, which are used by the CA to contact the certificate applicant. You also understand and agree that for the purpose of placing orders properly, you agree to authorize us to transfer the above information to our supplier iTrusChina in Ireland. iTrustChina will encrypt and transfer the information to CA DigiCert Ireland LTD. DigiCert Ireland will review the information and decide whether to issue certificates to you. You understand that the above information will be processed in Ireland and retained until you cancel the authorization or delete the certificate from CCM. The information will be also completely deleted from CCM if and when you revoke authorization or delete the certificate. You understand that the above information is necessary for providing services for you. If you do not provide or do not allow us to collect and use the above information, Huawei Cloud will not be able to provide the Service. You understand and agree that Huawei Cloud is entitled to collect, use, and process your personal data in accordance with the Privacy Statement (

2.3 Processing Your Content Data

You understand and agree that you and/or your end users have full ownership and complete control over the information of any format you authorize Huawei Cloud CCM to handle, including details about the CA, country, region, state, city, company name, department name, certificate signing requests (CSRs), and private certificate AltName like IP address, DNS, email, and URL, and you shall be responsible for the legality of the sources and acquisition of the preceding data. Huawei Cloud is entrusted by you to process your data to implement the functions or purposes of the Service, including: (1) The CA name, country/region name, state/city name, company name, and department will be used for creating private CAs. (2) Your CSRs will be used for submitting certificate applications to the CA. (3) Your IP address, DNS, email address, and URL added as AltName will be used for submitting a private certificate application. (4) Your certificate files, public keys, and private keys will be used for quickly deploying certificates for your cloud services. Your content data will be processed on servers in Europe. After you delete the certificate instance from the CCM console, the related content data will be deleted immediately.

2.4 Cooperation You Need to Provide

If you need to apply for an SSL certificate, you should submit an application to Huawei Cloud at least 7 to 10 working days before you use the certificate and cooperate with Huawei Cloud to complete domain name ownership and organization identity verification, or there might be possibilities that protection preparations are not enough. If CCM fails to meet your expectation due to this, Huawei Cloud will not be liable for any losses incurred.

2.5 Restrictions

You shall not use a certificate from CCM in any of the following cases: (1) The private key of the certificate is disclosed. If this happens, the CA will revoke the certificate within 24 hours after detecting the leakage. (2) There is proof that the certificate has been used for illegal services or behaviors, such as phishing or posting immoderate content that might damage the state security and public safety, disturb social order, infringe upon the rights and interests of other people, and more. The CA will revoke the certificate within 7 days (possibly shorter than 7 days). (3) The company that the certificate is bound to is prohibited from issuing certificates by the law of the country where the CA is located.

In the event of any of these cases, we have the right to unilaterally suspend or terminate the provisioning this Service to you and ask you to compensate us for any and all losses arising therefrom. In addition, we have the right to withhold any cloud service fees or support service fees you have already paid.

2.6 Disclaimer

2.6.1 Certificate application: You understand that SSL certificates are issued by CAs. You guarantee that you have provided real, accurate, valid information when configuring and submitting your service ticket or order. You are responsible for any service unavailability, legal consequences, and loss of Huawei Cloud caused by your provisioning of invalid information.

2.6.2 Private key hosting: If you choose to use Huawei Cloud to generate a Certificate Signing Request (CSR), Huawei Cloud will generate a private key for you. This private key is generated using a secure cryptographic algorithm that complies with international standards. The private key is stored with Huawei Cloud HSM, which will keep your private key secure on the cloud. After a certificate is issued, if you need to download the certificate and private key, make sure you keep the private key secure after the download. Huawei Cloud is not liable for any losses or consequences caused by the loss or disclosure of your private key.

2.6.3 Certificate issuing: Huawei Cloud is not responsible for any losses caused by reasons that are not related to Huawei Cloud, including but not limited to your configurations, certificate defects, or certificate cracking. If there are such issues, Huawei Cloud will cooperate with you to resolve them with the corresponding CA.

2.6.4 Certificate configuration: CCM is a certificate lifecycle management platform. Your servers may be not deployed on Huawei Cloud. In this case, if there are any issues about certificate configuration, you can submit a service ticket to Huawei Cloud. We will work with the after-sales personnel of the corresponding CA to provide you with necessary technical support, including certificate installation and configuration. If you want to upload a CSR that is generated locally to apply for a certificate, make sure a secure key algorithm is used. Huawei Cloud is not liable for any cybersecurity risks caused by insecure key algorithms used by your certificate or insecure protocols used when HTTPS is configured on your server.

2.6.5 Certificate use: You guarantee that the information you provide when applying for a certificate is real and valid, or CCM has the right to revoke the issued certificate and refund no money to you. Huawei Cloud is not liable for any legal liabilities caused by incorrect information that you provided when applying for a certificate.

2.6.6. Certificate renewal: From September 1, 2020, only one-year SSL certificates can be issued by all global digital certificate authorities (CAs). Multi-year SSL certificates you request through Huawei Cloud are based on one-year SSL certificates that are automatically renewed. Purchasing a multi-year certificate or enabling auto renewal for an SSL certificate indicates that you have understood and agree that for automated renewals Huawei Cloud will submit certificate details that you provide when applying for the current certificate to the CA within 30 days of when the current certificate expires. You have also understood and agree that the renewed SSL certificate is billed at the price when the certificate is renewed on the Huawei Cloud website, and Huawei Cloud automatically deducts the renewal payment from your account. Huawei Cloud is not responsible for any losses caused by renewal failures due to invalid certificate details you provide or failed auto-renewal payments.

2.6.7 Certificate revocation and expiration: Huawei Cloud is not responsible for website or service unavailability caused by SSL certificate expiration or revocation.


Last Updated: December 14, 2023