Table of Contents

When does a new certificate have to be reissued?

The reissue of a certificate may become necessary if the server changes and therefore a new CSR Key (Private Key) is required or if the Private Key is lost. The pure reissue is free of charge. The duration and data of the certificate will not be changed during a reissue.

Reissue certificates in the SSL Manager

Reissueing single certificates

  • Click Certificate Management in the TLS/SSL Certificates menu group.
  • Select the affected certificate in the list.
  • Click the Reissue Certificate button in the toolbar. In the main window the form with all data of the certificate opens.
  • Change CSR key:
    Delete the existing CSR key and insert the new one.
    Note that when copying the CSR code, mark the first line "-----BEGIN CERTIFICATE REQUEST-----" and the last line "-----END CERTIFICATE REQUEST-----" including the lines.
  • Finally always click the Check CSR Key button, even if you do not want to replace the CSR key.

You can use a DigiCert tool to check the correctness of the CSR key beforehand. https://ssltools.digicert.com/checker/views/csrCheck.jsp

  • Confirm the note for DSGVO.
  • Click on Submit to start the new issue.

Starting bulk reissues

  • Click Certificate Management in the TLS/SSL Certificates menu group.
  • Select the relevant certificate/s in the list.
  • In the toolbar, click on the tab for bulk reissue. A window will open with all certificates you have selected.

The certificate details cannot be edited with a bulk reissue. The reissues are carried out using the existing data. This function is not suitable for reissues being carried out due to the loss of private keys!

  • Click on Accept to start the reissues.

Changing the certificate on the server

Change the certificate (Server CRT) and the intermediate certificate (CA CRT) from the certificate administration on the corresponding server.

Tracking the order

In the Order History you can track all current and completed orders.

SAN Information on GlobalSign

With GlobalSign the adding of SAN's at the reissue only works with email validation. Each SAN change (new SAN or change/modification with the same SAN number) is liable to pay costs.

Required reissues

For technical reasons as well as new CA/B Forum requirements, it is necessary to carry out reissues for existing certificates on a regular basis. In order to give you a better overview of which certificates are affected, we have implemented the menu item Required reissues in the main menu of the Customer Center area. 

Using the new functions bulk reissue and bulk renew, it's much easier to carry out the required actions. Individual orders are also possible. Reissues that have been completed are immediately removed from the overview list. The overview is empty when all required actions have been carried out or there are no certificates in your portfolio that are affected.