Reissue replaces a certificate within the rules of an existing service. Renewal extends or replaces the purchased service for another term. A free reissue does not renew the subscription, and the subscription end date is not necessarily the installed certificate's expiry.
Use the paid order's controls below. Request certificate again in Control Center belongs to the free Let's Encrypt workflow; it does not reissue or renew your paid certificate order.
- Open the SSL order under My Account → Orders. Note the issued certificate expiry and any current status message. Also inspect the expiry of the certificate your website actually serves.
- Decide whether you need a reissue or a new service term. Lost private keys, a planned key replacement, or a damaged installation may require reissue. Contact support for expiry and renewal arrangements; automatic paid-certificate renewal is not provided by the current storefront.
- If the issued order offers Request free reissue, create a new private key and matching CSR for the same ordered coverage. Keep the existing working certificate and key securely until the replacement is installed. If the old key was exposed, tell support promptly and request guidance on revoking the old certificate as well.
- Paste the new request into New CSR (PEM), choose an offered Approval email, and select Request free reissue. The new request must use a different key from the previously issued certificate.
- After reissue starts, submit that same new CSR again through the configuration form shown for the order. Complete its validation cycle. Do not generate a different key between these two steps.
- Refresh the status when available, download the replacement after issuance, and install it with its new private key. Check the actual replacement expiry.
Check the result: Confirm the public website serves the intended replacement and covers every required hostname. Retire superseded key material according to your security process after the change has been verified.
Common problems: Free reissue appears only for products marked eligible. If it is absent, contact support. A locked, uncertain, or already-started reissue requires review; repeatedly submitting or placing a duplicate order can complicate the existing service. Do not assume reissue adds new hostnames or extends the paid term.
The issuer's product rules determine which replacement scenarios are supported. Its SSL lifecycle guide describes reissue as a distinct operation after a key change or another supported event.
Related: CSR and validation, Installation, Compromised website response.
Leave a Reply