How to Reissue an SSL Certificate in Your DigiCert Management Console
All DigiCert certificates come with unlimited free reissues. Some reasons you may reissue your certificate include:
- You lost your private key or want to re-key your certificate.
- You want to change the domain on the certificate (e.g., from www.yourname.com to secure.yourname.com).
- You want to change the organization name that is listed in the certificate.
- You want to add, remove, or change some of the SANs that are listed in your Multi-Domain SSL Certificate.
To reissue a certificate, you have to generate a new CSR on your server (see our CSR creation instructions) and then submit the CSR in your account.
Once you have the new CSR, complete the following steps:
Click the certificate’s order number.
On the My Certificates tab, on the Manager Your…Certificate - Order ######## page, scroll down to the Reissue Actions section and do one of the following:
Note: The options available to you in the Reissue Actions section will change depending on the type of SSL Certificate (i.e. SSL Plus, UC, EV Multi-Domain, etc.) you are reissuing.
Re-Key Your Certificate If you lost your private key, click this option. This option lets you replace the certificate without changing any of the certificate subject fields (i.e. common name, organization name, etc.). Re-Key Note: Rekeying your SSL Certificate does not revoke or affect previous certificates on the order. Edit Common Name If you want to get a new certificate with a different common name, click this option. (This option appears for SSL Plus, If you use this option, the certificate without the outdated common name is revoked. Wildcard, and EV SSL Plus Certificates only.) Add, Remove, or Change Domains If you want to make any of the following changes to your certificate, click this option: (This option appears for Unified • Change the common name (CN). Communications and EV Multi- • Add new Subject Alternative Names (SANs). Domain Certificates only.) • Remove any existing Subject Alternative Names (SANs). • Rearrange the order of the Subject Alternative Names. Depending on what you change, your original certificate and its duplicates may be revoked. Before you submit your request, you will be presented with this information. Edit Organization Details If you want to change any of your organizational details (i.e. name) in the certificate, click this option. If you use this option, the certificate without the outdated organization details is revoked.
On the Reissue page, do the following and then, click Continue to Next Step:
Paste Your CSR:* Do one of the following: • Paste your CSR in the area provided. • Click the Click to upload a CSR link to upload your CSR. • Rearrange the order of the Subject Alternative Names. Select Your Server Software:* In the drop-down list, select the server software that was used to generate the CSR. Reasons for Changes: Enter the reason for reissuing the certificate. (Optional)
Next, review the information and if all the information is correct, click These Changes Are Correct > Process Reissue.
Certificate Re-validation and Domain/Subdomain Re-verification
If any of the information in the certificate was changed, we will re-validate the certificate. If the common name or any SANs were changed to domains or subdomains that we haven't validated, we will verify the request using the contact information in the WHOIS record.
Once the reissue has been completed you will receive an email to the email address listed in the order with the new certificates attached.