How to reissue your certificate without buying again
Reissuing means asking for a fresh certificate within an order you already have. It costs nothing and there is no limit: while the order is running, you can reissue as often as you need.
It is what you do when the certificate is about to expire and the order is still alive, and also when something has changed and the certificate no longer serves you.
When you need to reissue
- The certificate expires soon and the order is still running. At current lifetimes this happens at least once per annual order. We email you about it.
- You moved servers and did not bring the private key with you.
- You lost the private key. The certificate you hold is now useless; you need a new one made with a new key.
- You got the domain wrong when generating the CSR, or you want to add or remove domains on a multi-domain certificate.
- You think the key has leaked. In that case reissue and also ask for the old one to be revoked.
How to do it
-
Generate a new CSR on the server the certificate will live on. Same procedure as the first time — see CSR Generation.
A new CSR means a new private key. Keep it: the one from the previous certificate will not work with the new one.
-
Sign in to your TiendaSSL dashboard, open the order and choose to reissue.
-
Paste the whole CSR, including the
-----BEGIN CERTIFICATE REQUEST-----and-----END CERTIFICATE REQUEST-----lines. -
Validate the domain if you are asked to. If you validated recently the authority may reuse it and not ask at all. That reuse window is shrinking too: months today, ten days by 2029.
-
Install the new certificate when it arrives, following the guide for your server under SSL Installation.
What reissuing does not do
It does not extend your order. If your order has three months left, the reissued certificate expires when the order does, however long the industry maximum happens to be. To extend the term you have to renew, which means buying a new order.
It does not switch off the previous certificate. The old one stays valid until its own expiry date. That is useful — you can install the new one without rushing — but if you reissued because the key leaked, ask for revocation as well.
It does not change the product. A single-domain order reissues single-domain certificates. If you need to cover more domains, or move to a wildcard, that is a separate purchase.
After installing
Confirm your site is serving the new certificate and not the old one with our SSL Checker. This is the most common mistake in the whole process: the file gets installed but the service is never restarted, and the server keeps handing out the old certificate.
