In order to provide payment security, WeChat Pay has enabled API certificates issued by authoritative CAs since June 2018. The steps to apply for a new certificate are as follows:
1. Follow the prompts to download the certificate generation tool
Although the SSL asymmetric encryption algorithm is commonly used, the certificate generation tool is unique to WeChat Pay and cannot be shared with Alipay's certificate generation tool.
Get the request string through this tool and use it in the next step.
2. Generate a certificate string and obtain the certificate file
Paste the "request string" in the tool software to the WeChat payment website to obtain the "certificate string", so the "certificate string" is obtained on the website.
After copying the "Certificate String", paste it in the generation tool, and click Next to complete the generation of the certificate file.
3. Obtain the certificate file
The certificate file is a compressed package in a specified directory, which contains the certificate files required for development, and can be delivered to the developer.
4. Supplementary instructions
The application scenarios of the certificate : (1) payment from the WeChat Pay merchant account; (2) partial refund or full refund of the WeChat Pay merchant's payment order. Both of these scenarios require a two-way formal verification.
Security of the certificate : The certificate must be placed on the server side during use, and cannot be distributed to WeChat fans along with official accounts or mini programs.
The certificate can be used universally : Whether it is APP, official account or small program development, where a certificate is required, only this certificate is required, and there is no need to generate it repeatedly.