Renew certificates
Annual plans
As of February 24, 2026, DigiCert TLS/SSL certificate plans are one year by default. Learn more about DigiCert annual plans.
Renew an expiring certificate to maintain continuous coverage. Renewals require a new CSR and complete domain validation. For OV and EV certificates, renewals also require current organization validation.
Before you begin
A new CSR must be generated before renewing. Generating a new CSR creates a new unique key pair for the renewed certificate. See Generate a certificate signing request (CSR).
You can renew a certificate order up to 90 days before it expires.
For Enterprise, Partner, and Legacy accounts using annual plans: the renewed certificate has a maximum validity of 199 days. To use remaining coverage on the plan, reissue the certificate rather than renewing.
Auto-renew requires account balance as the default payment method. Credit card payment is not supported.
Renew from the Expiring Certificates page
The Expiring Certificates page is the recommended starting point for renewals. Certificates appear on this page up to 90 days before expiration.
In the CertCentral main menu,
For Enterprise, Partner, and Legacy accounts: go to Certificates > Expiring Certificates.
For Subscription accounts: go to My Digital Trust Products > Certificates.
Locate the certificate to renew.
Select Renew now.
On the renewal order form, confirm or update the certificate details. DigiCert pre-populates the form with information from the expiring certificate.
Generate and paste a new CSR.
Notice
If your organization information changed since the last validation, you may need to provide new documentation to verify the changes. Update the organization information in the CSR before submitting the renewal.
Select the certificate validity period.
Select the payment method.
Read and accept the Certificate Services Agreement.
Select Submit.
After submission, the renewed certificate remains pending until all required validations are complete.
DigiCert issues the renewed certificate and emails it to the certificate contact.
Install and configure the new certificate on your server. Renewing a certificate does not automatically update the certificate on your website. See our SSL Certificate Installation Instructions & Tutorials.
Specific server instructions
The renewal process for some servers is slightly different than outlined in these instructions. Use these links to find instructions for a specific operating system or server.
We also recommend that you use the free DigiCert SSL Utility for Windows with an easy CSR generator.
Renewal FAQ
Q: Why do I need to install a new certificate if I'm just renewing my existing certificate?
A: Technically, when you renew a certificate, you’re buying a new certificate for the domain and company.
Industry standards require Certificate Authorities to hard-code the expiration date into certificates. When a certificate expires, it’s no longer valid and there’s no way to extend its life. When renewing your certificate, DigiCert must issue a new one to replace the expiring one, and you must install the new certificate on your server.
To make renewing a certificate easier, DigiCert automatically includes the information from the expiring certificate in our renewal wizard. However, because you're ordering a new certificate, you can update any of the information during the order process, if needed.
Anmerkung
If you change any of your organization’s information, you may need to provide new validation documentation to verify the changes. Change the organization information in the CSR.
Q: Do I need to create a new CSR when I renew my TLS/SSL certificate?
A: Yes. Best practices are to generate a new certificate signing request (CSR) when renewing your TLS/SSL certificate. Generating a new CSR creates a unique keypair (public/private) for the renewed certificate. See Create a CSR.
If you have a Windows server, you can use the free DigiCert Certificate Utility for Windows with an easy CSR generator.
What's next
Upgrade certificates to upgrade a certificate to a higher validation level or feature set