Renew an SSL/TLS certificate Print

  • 0

Renew an SSL/TLS certificate

SSL/TLS certificate renewal made easy

Industry standards change: End of 2-year public SSL/TLS certificates

On August 27, 2020, 6:00 PM MDT (August 28 00:00 UTC), DigiCert stopped issuing public DV, OV, and EV SSL/TLS certificates with a maximum validity greater than 397 days. This change may affect your early certificate renewals.

You can still renew a certificate order as early as 90 days to 1 day before it expires. When you renew, DigiCert transfers as much remaining validity as possible to the renewed certificate without exceeding the new 397-day maximum certificate validity. Any validity that we cannot transfer directly to the certificate is transferred to your order. To learn more, see End of 2-year DV, OV, and EV public SSL/TLS certificates.

Need to renew your DigiCert SSL/TLS certificate? Follow the steps below to renew your certificate. See the FAQ section for more information.

Step 1: Generate CSR

To renew an SSL/TLS certificate, you’ll need to generate a new CSR. For more information about creating a CSR, see our Create a CSR (Certificate Signing Request) page.

Best practices are to generate a new certificate signing request (CSR) when renewing your SSL/TLS certificate. Generating a new CSR creates a new, unique keypair (public/private) for the renewed certificate.

Step 2: Sign in to your account

Sign in to your CertCentral account.

Step 3: Fill out the renewal form

Fill out the certificate renewal order form. Note that after you submit the renewal order, DigiCert will perform a quick cross-check verification. If your organization’s information was changed in the CSR, you may need to provide new documentation to verify the changes.

CertCentral

  1. In the sidebar menu, click Certificates > Expiring Certificates.
  2. On the Expiring Certificates page, next to the certificate that needs to be renewed, click Renew Now.

A certificate doesn't appear on the Expiring Certificates page until 90 days before it expires.

Step 4: DigiCert issues the SSL/TLS certificate

Once approved, we issue and send the renewed certificate to the certificate contact in an email. You can also download the renewed certificate in your CertCentral account.

Step 5: Install your renewed SSL/TLS certificate

On the server, install and configure the new certificate. For more information about installing your certificate, see our SSL Certificate Installation Instructions & Tutorials page.

SSL/TLS Renewal instructions

The renewal process for some servers is slightly different than the instructions listed above.

We also recommend that you use the free DigiCert SSL Utility for Windows which has an easy CSR generator feature.


Was this answer helpful?

« Back