Renew an SSL/TLS certificate
SSL/TLS certificate renewal made easyIndustry standards change: End of 2-year public SSL/TLS certificates
On August 27, 2020, 6:00 PM MDT (August 28 00:00 UTC), DigiCert stopped issuing public DV, OV, and EV SSL/TLS certificates with a maximum validity greater than 397 days. This change may affect your early certificate renewals.
You can still renew a certificate order as early as 90 days to 1 day before it expires. When you renew, DigiCert transfers as much remaining validity as possible to the renewed certificate without exceeding the new 397-day maximum certificate validity. Any validity that we cannot transfer directly to the certificate is transferred to your order. To learn more, see End of 2-year DV, OV, and EV public SSL/TLS certificates.
Need to renew your DigiCert SSL/TLS certificate? Follow the steps below to renew your certificate. See the FAQ section for more information.
To renew an SSL/TLS certificate, you’ll need to generate a new CSR. For more information about creating a CSR, see our Create a CSR (Certificate Signing Request) page.
Best practices are to generate a new certificate signing request (CSR) when renewing your SSL/TLS certificate. Generating a new CSR creates a new, unique keypair (public/private) for the renewed certificate.
Sign in to your CertCentral account.
Fill out the certificate renewal order form. Note that after you submit the renewal order, DigiCert will perform a quick cross-check verification. If your organization’s information was changed in the CSR, you may need to provide new documentation to verify the changes.
CertCentral
- In the sidebar menu, click Certificates > Expiring Certificates.
- On the Expiring Certificates page, next to the certificate that needs to be renewed, click Renew Now.
A certificate doesn't appear on the Expiring Certificates page until 90 days before it expires.
Once approved, we issue and send the renewed certificate to the certificate contact in an email. You can also download the renewed certificate in your CertCentral account.
On the server, install and configure the new certificate. For more information about installing your certificate, see our SSL Certificate Installation Instructions & Tutorials page.
The renewal process for some servers is slightly different than the instructions listed above.
We also recommend that you use the free DigiCert SSL Utility for Windows which has an easy CSR generator feature.
