苹果开发者证书支持说明文档

原始链接如下：Certificates - Support - Apple Developer

--
以下是网页原始内容
--

Certificates

Apple Developer Program membership is required to request, download, and use signing certificates issued by Apple. You must also be the Team Agent or an admin of your development team to request distribution certificates used for submitting apps to the App Store or Mac App Store. For more information on how to use signing certificates, review the Xcode Help Guide.

In most cases, Xcode is the preferred method to request and install digital certificates for iOS and macOS. However, to request certificates for the Apple Push Notification service, Passbook, Mobile Device Management (MDM), and Safari extensions, you will need to request and download them from Certificates, Identifiers & Profiles in your account on the developer website.

Expired or Revoked Certificates

• Apple Push Notification Service Certificate

  You can no longer send push notifications to your app.

• Apple Pay Payment Processing Certificate

  Apple Pay transactions in your apps and websites will fail.

• Apple Pay Merchant Identity Certificate
  Apple Pay transactions on your websites will fail.

• Pass Type ID Certificate (Wallet)

  If your certificate expires, passes that are already installed on users' devices will continue to function normally. However, you will no longer be able to sign new passes or send updates to existing passes. If your certificate is revoked, your passes will no longer function properly.

• iOS Distribution Certificate (App Store)

  If your Apple Developer Program membership is valid, your existing apps on the App Store will not be affected. However, you will no longer be able to upload new apps or updates signed with the expired or revoked certificate to the App Store.

• iOS Distribution Certificate (in-house, internal use apps)

  Users will no longer be able to run apps that have been signed with this certificate. You must distribute a new version of your app that is signed with a new certificate.

• Mac App Distribution Certificate and Mac Installer Distribution Certificate (Mac App Store)

  If your Apple Developer Program membership is valid, your existing apps on the Mac App Store will not be affected. However, you will no longer be able to upload new apps or updates signed with the expired or revoked certificate to the Mac App Store.

• Developer ID Application Certificate (Mac applications)

  If your certificate expires, users can still download, install, and run versions of your Mac applications that were signed with this certificate. However, you will need a new certificate to sign updates and new applications. If your certificate is revoked, users will no longer be able to install applications that have been signed with this certificate. If your Mac application utilizes a Developer ID provisioning profile to take advantage of advanced capabilities such as CloudKit and push notifications, you must ensure your Developer ID provisioning profile is valid in order for installed versions of your application to run. Read more.

• Developer ID Installer Certificate (Mac applications)

  If your certificate expires, users can no longer launch installer packages for your Mac applications that were signed with this certificate. Previously installed apps will continue to run however new installations will not be possible until you have re-signed your installer package with a valid Developer ID Installer certificate. If your certificate is revoked, users will no longer be able to install applications that have been signed with this certificate.

• Apple Worldwide Developer Relations Certification Intermediate Certificate

  The Apple Worldwide Developer Relations Certificate Authority issues certificates used by developers for signing third party apps and Safari Extensions, and for using Apple Wallet and Apple Push Notification services. We’ve issued a renewed certificate that must be included when signing all new Apple Wallet Passes, Apple Push Notifications, Safari Extensions, and apps for the App Store, starting February 14, 2016. Read more.

Note: Apple can revoke digital certificates at any time at its sole discretion. For more information, read the Apple Developer Program license agreements in your account on the developer website.

--
以下为翻译内容，作为参考
--

证书

苹果开发者计划的会员资格要求，下载和使用苹果发布的签名证书。您还必须是开发团队的团队代理或管理员，以请求用于向App Store或Mac应用程序商店提交应用程序的分发证书。有关如何使用签名证书的详细信息，请参阅Xcode Help Guide.。

在大多数情况下，Xcode是为iOS和macOS请求和安装数字证书的首选方法。然而，要申请苹果推送通知服务、Passbook、移动设备管理(MDM)和Safari扩展的证书，你需要从[证书、标识符和配置文件](https://idmsa.apple.com/idmswebauth/login? appidkey= 891bd3417a7776362562197f89480a8fd911bcbea0110d075757and path)中请求并下载它们在开发网站上的帐号中。

过期或撤销证书。

• 苹果推送通知服务认证。

  你不能再向你的应用发送推送通知了。

• apple Pay支付处理证书

  Apple Pay在你的应用和网站上的交易将会失败。

• 苹果支付商户身份证明

  你的网站上的Apple Pay交易将会失败。

• Pass类型的ID证书(钱包)

  如果您的证书到期，已经安装在用户设备上的证书将继续正常运行。然而，您将不再能够签署新的传递或发送更新到现有的通行证。如果您的证书被撤销，您的传递将不再正常工作。

• iOS发布证书(App Store)

  如果你的苹果开发者计划的会员资格是有效的，你现有的应用程序商店将不会受到影响。但是，您将不能再上传与过期或撤销证书签署到App Store的新应用程序或更新。

• iOS分发证书(内部使用应用程序)

  用户将不再能够运行与该证书签署的应用程序。您必须发布一个新版本的应用程序，该版本将使用新的证书签名。

• Mac应用分发证书和Mac安装程序分发证书(Mac App Store)

  如果你的苹果开发者计划的会员资格是有效的，你在Mac应用商店的现有应用将不会受到影响。然而，你将不再能够上传新的应用或更新与过期或被撤销的证书到Mac应用商店。

• Developer ID应用程序证书(Mac应用程序)

  如果您的证书到期，用户仍然可以下载、安装和运行与该证书签署的Mac应用程序的版本。但是，您需要一个新的证书来签署更新和新的应用程序。如果您的证书被撤销，用户将不再能够安装与此证书签署的应用程序。如果您的Mac应用程序使用了开发人员ID配置文件来利用CloudKit和推送通知等高级功能，那么您必须确保您的开发人员ID配置文件是有效的，以便您的应用程序的安装版本运行。了解更多。

• Developer ID Installer证书(Mac应用程序)

  如果您的证书到期，用户就不能再为您的Mac应用程序启动安装程序包了。以前安装的应用程序将继续运行，但是直到你重新签署安装程序包和有效的开发人员ID安装证书后才可能出现新的安装。如果您的证书被撤销，用户将不再能够安装与此证书签署的应用程序。

• 苹果全球开发者关系认证中级证书

  苹果全球开发者关系证书颁发机构颁发证书，用于开发第三方应用程序和Safari扩展，并使用苹果钱包和苹果推送通知服务。2016年2月14日起，我们已经发布了一份新证书，该证书必须包括在签署所有新苹果钱包、苹果推送通知、Safari扩展和应用程序商店的时候。了解更多。

Note:苹果可以在任何时候自行撤销数字证书。要了解更多信息，请阅读您的帐户 的Apple Developer程序许可协议在开发人员网站上。