Instructions for Using the DigiCert Certificate Utility to Renew Your SSL Certificate

The instructions are for using the DigiCert® Certificate Utility for Windows to create your CSR (certificate signing request) and install your SSL Certificate. Then, you need to use the instructions for your specific server platform to assign/configure your SSL Certificate on your server.

To Renew Your SSL Certificate:

  1. Create your CSR.

    See Creating a New CSR with the DigiCert Utility.

  2. Install your new SSL Certificate.

    See Importing Your SSL Certificate with the DigiCert Utility.

  3. Configure or assign your new SSL Certificate.

    See Assign & Configure Server Software to Use the New SSL Certificate.

 

1. Creating a New CSR with the DigiCert Utility

  1. On your Windows server with the expiring certificate, download and save the DigiCert® Certificate Utility for Windows executable (DigiCertUtil.exe).

  2. Run the DigiCert® Certificate Utility for Windows

    Double-click DigiCertUtil.

  3. In the DigiCert Certificate Utility for Windows©, click SSL (gold lock), select the expiring certificate, and then click Create CSR.

    Create a renewal CSR in Windows

  4. In the "Would you like to import the attributes from 'certificate' into the new CSR?" window, click Yes.

    Create a renewal CSR in Windows

  5. On the Create CSR page, verify that all the certificate details are correct, and then click Generate.

    Create a renewal CSR in Windows

  6. On DigiCert Certificate Utility for Windows© - Renew Certificate page, do one of the following, and then, click Close:

    Click Copy CSR. Copies the certificate contents to the clipboard.
      If you use this option, we recommend that you paste the CSR into a tool such as Notepad.
      If you forget and copy some other item, you still have access to the CSR, and you do not have to go back and recreate it.
       
    Click Save to File. Saves the CSR as a .txt file to the Windows server.
      We recommend that you use this option.
       

    Copy CSR to Clipboard

  7. Order your new SSL Certificate:

    1. Log into your DigiCert Account.

    2. On the My Orders tab, next to the order that you want to renew, click + to expand the options and then, click Renew.

    3. Follow the instructions to renew your certificate.

      During the renewal process, you'll be prompted for your CSR. To submit your CSR, you can upload the file that you saved to your Windows server, or you can paste the information from the clipboard.

    4. After you place the order to renew your certificate, DigiCert verifies your information.

      If we need any additional information, we'll promptly contact you by phone or email. If no additional information is required, we'll most likely issue your certificate within an hour.

    Ready to Order Your SSL Certificate!

    Buy Now Learn More
 

2. Importing Your SSL Certificate with the DigiCert Utility

Once your renewal certificate order has been validated and issued, you need to copy your SSL Certificate file to the server where the CSR was created. Then, you need to run the DigiCert Certificate Utility to import it to your Microsoft Server.

  1. After receiving your new certificate file from DigiCert, save the file to the Windows server where you created the CSR.

  2. On the same server, run the DigiCert® Certificate Utility for Windows.

    Double-click DigiCertUtil.

  3. In DigiCert Certificate Utility for Windows©, click SSL (gold lock) and then, click Import.

    Import your_domain_com.cer

  4. In the Certificate Import wizard, click Browse to browse to the .cer certificate file (i.e. your_domain_com.cer) that DigiCert sent you, select the file, click Open, and then, click Next.

    Import your_domain_com.cer

  5. In the Enter a new friendly name or you can accept the default box, type a friendly name for the certificate.

    Note:    The friendly name is not part of the certificate; instead, it is used to identify the certificate.

    We recommend that you add DigiCert and the expiration date to the end of your friendly name, for example: yoursite-digicert-(expiration date). This information helps identify the issuer and expiration date for each certificate. It also helps distinguish multiple certificates with the same domain name.

    Assign a Friendly Name

  6. To import the SSL Certificate to your server, click Finish.

    You should receive "Your certificate has been successfully imported" message. You are now ready to assign/configure your server software to use the renewed SSL Certificate.

 

3. Assign & Configure Server Software to Use the New SSL Certificate

After importing the certificate, you need to follow the instructions to tell your server to use this certificate for securing your website or email connections. Follow the instructions for your specific server platform:

IIS 8 Exchange 2013
IIS 7 Exchange 2010
IIS 6 Exchange 2007
   

Export an SSL Certificate

If you need to export an installed SSL certificate from a Microsoft server type with its corresponding private key as a .pfx file to use either as a backup or for importing to another server, see DigiCert Certificate Utility SSL Certificate Export Instructions.

Test Your Installation

To verify that the installation is correct, use our DigiCert® SSL Installation Diagnostics Tool and enter the DNS name of the site (i.e. www.yourdomain.com, or mail.yourdomain.com) that you are securing to test your SSL Certificate.