How do I reissue an SSL certificate?

Reissuing gets you a new copy of your SSL certificate, with a new private key, for the rest of its validity period. You might need to reissue if you:

• lost the private key, or think it’s been exposed
• are moving the site to a new server
• need to change the certificate’s CSR details, or add or change domains (where your certificate type allows it)

Reissuing doesn’t cost extra and doesn’t change the expiry date.

Note

Free Let’s Encrypt certificates (AutoSSL) don’t need reissuing. They’re renewed automatically. To get a fresh one, open SSL/TLS Status in cPanel and click Run AutoSSL.

Reissue your certificate

1. Generate a new CSR and private key. In cPanel, use SSL/TLS → Certificate Signing Requests (CSR). See Generating a CSR using cPanel, or the guide for your server type.
2. Log in to the client area and go to Services → My Services.
3. Select your SSL certificate and choose Reissue Certificate.
4. Paste the new CSR, choose a validation method (email, DNS or file upload), and submit.
5. Complete the validation. See Buying and activating an SSL certificate.
6. Install the new certificate. See Installing a third-party SSL certificate.

OV and EV certificates

For OV and EV certificates, a reissue keeps your existing organisation validation as long as the organisation details stay the same. If you change the company name or other organisation details, Sectigo will validate the organisation again, which can take a few days.

Can’t see the reissue option, or need help? Open a support ticket and we’ll reissue and install it for you.