Certificates expire. When one does, every visitor sees a full-page browser warning, so treat the date as a deadline.
Before it expires
- Check the date under SSL in the sidebar, and on Renewals with everything else.
- Renew the certificate order — see Renewals and auto-renew.
- A renewed certificate is issued afresh: generate a new CSR, prove the domain again, and install the new certificate. See Issue your certificate.
Important
Renewing the order is not the same as installing the new certificate. The site keeps serving the old one until you install the new one.
When to reissue instead
Ask for a reissue — free, within the certificate's term — when:
- the private key is lost, or you moved to a new server and no longer have it;
- your organisation's details have changed;
- the domain on the certificate is wrong.
Open a ticket from the certificate's page with the new CSR, and we take it through with the authority. You then verify the domain again and install the new certificate.