1. Home
2. /
3. TLS/SSL & S/MIME
4. /
5. Certificate reissue

Certificate reissue

2 min read

When does a new certificate have to be reissued?

When does a new certificate have to be reissued?
The reissue of a certificate may become necessary if the server changes and therefore a new CSR Key (Private Key) is required or if the Private Key is lost. The pure reissue is free of charge. The duration and data of the certificate will not be changed during a reissue.

Step 1: Reissueing single certificates in the SSL Manager

• Click Certificate Management in the TLS/SSL Certificates menu group.
• Select the affected certificate in the list.
• Click the Reissue Certificate button in the toolbar.
  In the main window the form with all data of the certificate opens.
• Change CSR key:
  Delete the existing CSR key and insert the new one.
  Note that when copying the CSR key, mark the first line “-----BEGIN CERTIFICATE REQUEST-----” and the last line “-----END CERTIFICATE REQUEST-----” including the lines.
• Always click the Check CSR Key button at the end, even if you do not want to replace the CSR key.
• Confirm the note for GDPR.
• Click on Submit to start the reissue.

You can use a DigiCert tool to check the correctness of the CSR key beforehand. https://ssltools.digicert.com/checker/views/csrCheck.jsp

or Step 1: Bulk reissues

• Click Certificate Management in the TLS/SSL Certificates menu group.
• Select the relevant certificate/s in the list.
• In the toolbar, click the Bulk Reissue button. A window will open with all certificates you have selected.
• Click on Accept to start the reissues.

The certificate details cannot be edited with a bulk reissue. The reissues are carried out using the existing data. This function is not suitable for reissues being carried out due to the loss of private keys.

Step 2: Changing the certificate on the server

Change the certificate (Server CRT) and the intermediate certificate (CA CRT) from the certificate administration on the corresponding server.

Step 3: Tracking the order

In the Order History you can track all current and completed orders.

SAN Information on GlobalSign
With GlobalSign the adding of SAN’s at the reissue only works with email validation. Each SAN change (new SAN or change/modification with the same SAN number) is liable to pay costs.

Customer Center - required reissues
For technical reasons as well as new CA/B Forum requirements, it is necessary to carry out reissues for existing certificates on a regular basis. In order to give you a better overview of which certificates are affected, we have implemented the menu item Required reissues in the main menu of the Customer Center area.

Using the new functions bulk reissue and bulk renew, it’s much easier to carry out the required actions. Individual orders are also possible. Reissues that have been completed are immediately removed from the overview list. The overview is empty when all required actions have been carried out or there are no certificates in your portfolio that are affected.