Reissue SSL Certificate

SSL Certificates can be reissued when needed, allowing customers to obtain a new SSL Certificate without submitting a new order. Reissuing is available at no additional cost throughout your license period.

Reissue Your SSL Certificate

Reissuing is useful when any part of the SSL Certificate has been lost, server configuration has changed, or when you need to claim remaining validity from a multi-year license. Trustico® makes the reissue process simple and efficient through the tracking system, ensuring customers and partners can quickly generate a new SSL Certificate when required.

Reasons to Reissue an SSL Certificate

There are several common reasons why you might need to reissue your SSL Certificate. Understanding when reissuing is appropriate helps ensure your website maintains continuous protection.

Claiming Remaining License Validity

Due to industry regulations, SSL Certificates have a maximum validity period of 200 days. If you purchased a multi-year SSL Certificate license, your initial SSL Certificate was issued for this maximum period, with the remaining validity held in your license balance.

Reissuing allows you to claim this remaining validity and obtain a fresh SSL Certificate covering the next portion of your license. This is a normal part of maintaining your SSL Certificate protection throughout a multi-year license period. Learn About Maintaining Your SSL Certificate Protection 🔗

Lost or Compromised Private Key

If you have lost access to your Private Key or believe it may have been compromised, you should reissue your SSL Certificate immediately. The reissue process generates a new SSL Certificate bound to a new Private Key, ensuring your website security is restored. Learn About Private Key Security 🔗

Warning : A compromised Private Key allows unauthorized parties to intercept encrypted communications to your website. If you suspect your Private Key has been exposed, reissue your SSL Certificate immediately and revoke the previous SSL Certificate.

Server Changes or Migration

When migrating to a new server or making significant changes to your server configuration, you may need to generate a new Certificate Signing Request (CSR) with a new Private Key. Reissuing your SSL Certificate ensures it works correctly with your updated server environment.

Validity Behavior When Reissuing

Reissuing your SSL Certificate does not forfeit any unused validity from your current SSL Certificate. Your license tracks the total coverage period you purchased, and each reissue draws from this balance.

When you reissue, your new SSL Certificate receives the maximum available validity, up to the 200-day limit. If your remaining license balance exceeds 200 days, you will receive an SSL Certificate valid for 200 days and can reissue again in the future to claim the remaining validity.

If your remaining balance is less than 200 days, your reissued SSL Certificate will be valid for the remaining balance.

For example, a customer with a two-year license receives an initial SSL Certificate valid for 200 days. When they reissue before that SSL Certificate expires, the next SSL Certificate is again issued for 200 days. This continues throughout the license period, with the final SSL Certificate receiving the remaining balance of the license. Learn About SSL Certificate Maximum Validity Periods 🔗

Reissue Process for Your SSL Certificate

Reissuing your SSL Certificate is straightforward using the Trustico® tracking system. Your Certificate Authority (CA) Reference number is required to access the tracking system. This number was provided to you in your order confirmation e-mail when your SSL Certificate was first issued and also appears on your Trustico® invoice.

Your Certificate Authority (CA) Reference number is different from your Trustico® order number. The Certificate Authority (CA) Reference number is issued by the Certificate Authority (CA) and is the identifier that links your reissue request to the original SSL Certificate.

Note : In our legacy system, this identifier was previously called the Supplier Order Number. If you have older documentation referencing a Supplier Order Number, this is the same credential now referred to as your Certificate Authority (CA) Reference.

Customers who placed orders through our legacy system and no longer have their Certificate Authority (CA) Reference to hand can use the lookup tool to retrieve it. Learn About Locating Your CA Reference 🔗

Step 1 : Access the Tracking System

Visit the Trustico® tracking system and enter your Certificate Authority (CA) Reference number. The tracking system displays your current SSL Certificate status, license details, and available validity remaining. Explore Our Tracking System 🔗

Step 2 : Initiate the Reissue

Select the option to reissue your SSL Certificate. You will be prompted to provide a new Certificate Signing Request (CSR), which should be generated on the server where the SSL Certificate will be installed.

The system displays the maximum validity available for your reissued SSL Certificate based on your license balance. Learn About Certificate Signing Requests (CSR) 🔗

Step 3 : Complete Validation

Reissued SSL Certificates occasionally require validation. For Domain Validated (DV) SSL Certificates, this typically involves responding to a validation e-mail or completing file-based or Domain Name System (DNS) based validation.

Organization Validated (OV) and Extended Validation (EV) SSL Certificates may require the Certificate Authority (CA) to reverify organization details if significant time has passed since original validation. Learn About SSL Certificate Validation 🔗

Step 4 : Install Your New SSL Certificate

Once validation is complete, your reissued SSL Certificate is available for download from the tracking system. Install the new SSL Certificate on your server, replacing the previous one.

Remember to install current Intermediate Certificates to ensure proper chain validation.

Tracking & Management Intermediate Certificates

Trustico® provides comprehensive installation guides for various platforms and server configurations. Learn About SSL Certificate Installation 🔗

Reissue as Often as Needed

There is no limit to how many times you can reissue your SSL Certificate during your license period, and there is no additional cost for reissuing.

Whether you need to reissue once per year to claim validity or multiple times due to infrastructure changes, all reissues are included in your license. This flexibility ensures you always have access to a current, fully valid SSL Certificate whenever you need it.

Monitoring Your SSL Certificate

Customers are responsible for monitoring their SSL Certificate expiry dates and ensuring timely reissue to maintain continuous coverage. The Trustico® tracking system provides downloadable calendar files for both your SSL Certificate expiry date and your license expiry date.

Important : Partners and customers are responsible for monitoring the expiry dates of installed SSL Certificates. The ordering system displays all orders on an account with the purchased license validity dates, however each SSL Certificate has its own validity dates dependent on when it was issued within the license period.

The tracking system can be accessed on an order-by-order basis and displays both the license validity and the validity details of the last SSL Certificate issued. When managing multiple SSL Certificates, it is advisable to use bespoke monitoring tools or dedicated SSL Certificate monitoring software to detect installed SSL Certificates and be alerted when it is time to reissue.

Consider using SSL Certificate monitoring software to continuously check your SSL Certificate status and alert you to upcoming expiry or configuration issues.

Partner Access to Reissue Management

Trustico® partners have full access to the tracking system, allowing them to manage reissue requests for their customers. Partners should ensure they monitor SSL Certificate expiry dates and initiate reissues to maintain uninterrupted protection for their customers. Learn About The Trustico® Partner Service 🔗

Most Popular Questions

Frequently asked questions covering when to reissue an SSL Certificate, locating your Certificate Authority (CA) Reference, claiming remaining validity from a multi-year license, the reissue process through the Trustico® tracking system, and your responsibilities for monitoring SSL Certificate expiry.

What Reissuing an SSL Certificate Means

Reissuing allows you to obtain a new SSL Certificate without submitting a new order or paying additional fees. Trustico® provides unlimited reissues throughout your license period, enabling you to obtain a fresh SSL Certificate whenever needed.

Reasons to Reissue an SSL Certificate

You should reissue your SSL Certificate when claiming remaining validity from a multi-year license, when your Private Key has been lost or compromised, or when migrating to a new server that requires a new Certificate Signing Request (CSR). If you suspect your Private Key has been exposed, reissue immediately and revoke the previous SSL Certificate.

Unused Validity When Reissuing an SSL Certificate

Reissuing does not forfeit any unused validity. Your license tracks the total coverage period you purchased, and each reissue draws from this balance. Your new SSL Certificate receives the maximum available validity up to the 200-day industry limit.

Locating Your Certificate Authority (CA) Reference Number

Your Certificate Authority (CA) Reference number was provided to you in your order confirmation e-mail when your SSL Certificate was first issued and also appears on your Trustico® invoice. Customers who placed orders through our legacy system and no longer have the reference to hand can use the lookup tool to retrieve it. The Certificate Authority (CA) Reference is different from your Trustico® order number.

The Reissue Process Through Trustico®

Access the Trustico® tracking system and enter your Certificate Authority (CA) Reference number. Select the reissue option, provide a new Certificate Signing Request (CSR) generated on the server where the SSL Certificate will be installed, complete any required validation, then download and install your new SSL Certificate.

Validation Requirements When Reissuing

Domain Validated (DV) SSL Certificates may require responding to a validation e-mail or completing file-based or Domain Name System (DNS) based validation. Organization Validated (OV) and Extended Validation (EV) SSL Certificates may require the Certificate Authority (CA) to reverify organization details if significant time has passed since original validation.

Limits on the Number of Reissues per License

There is no limit to how many times you can reissue during your license period, and all reissues are included at no additional cost. You can reissue as often as needed, whether once per year to claim validity or multiple times due to infrastructure changes.

Validity Behavior for Multi-Year SSL Certificate Licenses

Due to industry regulations, SSL Certificates have a maximum validity of 200 days. For a two-year license, your initial SSL Certificate is valid for 200 days, and when you reissue before expiry, the next SSL Certificate is again issued for 200 days. This continues throughout the license period, with the final SSL Certificate receiving the remaining balance of the license.

Responsibility for Tracking SSL Certificate Expiry

Customers are responsible for monitoring SSL Certificate expiry dates and initiating timely reissues. The Trustico® tracking system provides downloadable calendar files for both your SSL Certificate expiry and license expiry dates. When managing multiple SSL Certificates, consider using dedicated SSL Certificate monitoring software to detect installed SSL Certificates and alert you when reissue is needed.

Ask Trustico® Assistant

For Instant Answers - Start Here When You Have a Question or Need Help

DNS-PERSIST-01 Explained : Persistent Authorization for ACME SSL Certificate Validation

DNS-PERSIST-01 Explained : Persistent Authoriza...

A new fourth method, DNS-PERSIST-01, is making its way through the standards process and promises to change how Domain Name System (DNS) based validation works at scale.

DNS-PERSIST-01 Explained : Persistent Authoriza...

A new fourth method, DNS-PERSIST-01, is making its way through the standards process and promises to change how Domain Name System (DNS) based validation works at scale.

ACME Client Configuration Options for SSL Certificate Automation

ACME Client Configuration Options for SSL Certi...

Two customers using the same protocol against the same Certificate Authority (CA) can end up with completely different behavior because their clients are configured differently.

ACME Client Configuration Options for SSL Certi...

Two customers using the same protocol against the same Certificate Authority (CA) can end up with completely different behavior because their clients are configured differently.

Quantum Computing Pushes Post-Quantum Cryptography Deadlines Forward to 2029

Quantum Computing Pushes Post-Quantum Cryptogra...

Full post-quantum support across Google services is now targeted for 2029, several years earlier than previous public commitments.

Quantum Computing Pushes Post-Quantum Cryptogra...

Full post-quantum support across Google services is now targeted for 2029, several years earlier than previous public commitments.

Trustico® Certificate as a Service (CaaS) cPanel Plugin

Trustico® Certificate as a Service (CaaS) cPane...

The Trustico® Certificate as a Service (CaaS) cPanel Plugin brings automated SSL Certificate retrieval, installation, and renewal directly into the cPanel dashboard - no command line, no manual steps, and...

Trustico® Certificate as a Service (CaaS) cPane...

The Trustico® Certificate as a Service (CaaS) cPanel Plugin brings automated SSL Certificate retrieval, installation, and renewal directly into the cPanel dashboard - no command line, no manual steps, and...

Commercial SSL Certificates in 2026 : Why They Matter More Than Ever

Commercial SSL Certificates in 2026 : Why They ...

For businesses, this creates a problem. If every website has a padlock, including fraudulent ones, how do legitimate businesses differentiate themselves?

Commercial SSL Certificates in 2026 : Why They ...

For businesses, this creates a problem. If every website has a padlock, including fraudulent ones, how do legitimate businesses differentiate themselves?

How Quickly Are SSL Certificates Issued - Domain Validation, CaaS, OV and EV Explained

How Quickly Are SSL Certificates Issued - Domai...

Understanding what happens during the issuance process helps you choose the right SSL Certificate for your timeline and avoid unnecessary delays that could impact your launch, migration, or renewal schedule.

How Quickly Are SSL Certificates Issued - Domai...

Understanding what happens during the issuance process helps you choose the right SSL Certificate for your timeline and avoid unnecessary delays that could impact your launch, migration, or renewal schedule.

1 / 6