Limit and usage

• Contract Limit, set by your ​Akamai​ representative, determines the maximum Default DV certs that you can use in your contract.

• Default DV certs usage increases only by 1 if the domain is activated with the DEFAULT certificate type on one or both networks production and staging.

  Example sequence to understand usage increase:

  1. Hostname = a.com
     Certificate type = DEFAULT
     Network = staging
     Usage: 1

  2. Hostname = a.com
     Certificate type = DEFAULT
     Network = production
     Usage: 1

• Default DV certs usage decreases by 1 only when the hostname is deprovisioned or changed to the CPS-managed certificate type on all networks where it was activated with the DEFAULT certificate type.

  Example sequences to understand reducing contract usage:

  Activating two different hostnames

  1. Hostname = a.com
     Certificate type = DEFAULT
     Network = production
     Usage: 1

  2. Hostname = a.com
     Certificate type = DEFAULT
     Network = staging
     Usage: 1

  3. Hostname = a.com
     Certificate type = CPS_MANAGED
     Network = production
     Usage: 1

  4. Hostname = a.com
     Certificate type = CPS_MANAGED
     Network = staging
     Usage: 0
     Note that the usage got reduced only when the hostname was changed to use CPS_MANAGED cert type on all networks.

  Deactivating a hostname

  1. Hostname = a.com
     Certificate type = DEFAULT
     Network = production (activated)
     Usage: 1

  2. Hostname = a.com
     Certificate type = DEFAULT
     Network = staging (activated)
     Usage: 1

  3. Hostname = a.com
     Certificate type = DEFAULT
     Network = production (deactivated)
     Usage: 1

  4. Hostname = a.com
     Certificate type = DEFAULT
     Network = staging (deactivated)
     Usage: 0
     Note that now the usage is decreased.

Warnings and errors

You may receive the following messages:

1. Activate the property on a specific network

🚧

The end state would have enough quota available, but you need to activate the property on a specific network first to make default cert quota available. For example, one network would be over the quota limit unless you activate the property on the other one first. See Default DV contract limit and usage.

Example of the reason
Contract Limit/Quota: 1
Usage: 0

Property version X:
Hostname: H1.com
Certificate Type: DEFAULT
Usage: 1
This property version is activated on the production network.

Property version Y:
Hostname: H1.com
Certificate Type: CPS_MANAGED
Hostname: H2.com
Certificate Type: DEFAULT
Usage: 1
This property version can be activated on the production network.
It can’t be activated on the staging network.

Note that it is allowed on the production network because, as part of the production activation, it will free up H1 from using DEFAULT and can be used for H2, thereby Keeping Usage is 1. However, it is not allowed on the staging network, because the X property version is still active on the production network, so H1’s usage can’t be released. This causes usage to exceed the limit (2 > 1).

In this case, after activation on the production network, you can activate the Y property version on the staging network.

2. Not enough quota available

🚧

The end state has got enough quota available. However, if you just activate the property in the staging or production environments first, that intermediate step won’t have enough quota available. Split your hostname changes into two separate property versions: first one to delete default certs to clear up quota (which you’ll have to activate in both network environments), and then a second one to add the new default certs. See Default DV contract limit and usage.

Example of the reason
Contract Limit/Quota : 1
Usage: 0

Property version X:
Hostname: H1.com
Certificate Type: DEFAULT
Usage: 1
This version is activated on both networks.

Property version Y:
Hostname: H1.com
Certificate Type: CPS_MANAGED
Usage: 0
Note that the usage got reduced only when the hostname was changed to use the CPS_MANAGED cert type in all networks.
This version is activated on both the networks.

Property version Z:
Hostname: H2.com
Certificate Type: DEFAULT
Usage : 1
This version can be activated on both networks.

To add a new hostname when the end state has got enough quota already we split this transaction into two phases. First, we activate the property by deprovisioning the hostname to CPS_MANAGED from DEFAULT DV certificate type which thereby reduces the usage count to 0. Then, we can add a new hostname with the DEFAULT DV certificate type and activate it on both networks which thereby will increase the usage to 1.