Prevent interruptions in your Apple Pay service by keeping certificates and domain verification current.
- Apple Pay JS
- Payment Request API
To prevent interruptions in your website’s Apple Pay service, your domain verification and the certificates that you set up in Configuring Your Environment must remain valid. While your merchant ID never expires, certificates and domain verification do expire, as follows:
The Payment Processing certificate expires every 25 months.
The Merchant Identity certificate expires every 25 months.
A registered domain’s verification expires when its SSL certificate expires.
View Expiration Dates and Update Certificates
You can view expiration dates and update the certificates on the Apple developer website by following these steps:
Sign in to your account with an Account Holder or Admin role.
Open the Certificates, Identifiers, and Profiles page.
Under Identifiers, select Merchant IDs.
Select your domain’s merchant ID and select Edit.
Certificate expiration dates appear for each of the certificates listed on the page. You can also update the certificates on this page.
Renew Your Domain Verification
Domain verification expires on the same date that your domain’s SSL certificate expires. Apple servers check if SSL certificates have been renewed at 30, 15, and 7 days before expiration.
If you update the SSL certificate before it expires, Apple detects the renewed certificate and the domain remains verified. No further action is required on your part.
If the SSL certificate expires and is not replaced before expiring, you must redo domain verification in your Apple Developer Account. See Verify a Merchant Domain for additional information.
Make sure that the specified URL you originally used when validating the merchant domain is accessible to Apple servers listed in Whitelist Apple IP Addresses for Domain Verification. The URL may be similar to https://yourdomain.com/.well-known/apple-developer-merchantid-domain-association.