Skip to main content

Order your client certificate

Before you begin

If organization policy requires you to include a certificate signing request (CSR) with your client certificate order, create your CSR. Learn how to Create a CSR (Certificate Signing Request).

Order client certificate

  1. In the sidebar menu, hover over Request a certificate. Then, under Client certificates, select the client certificate you want to order.

  2. On the Request a client certificate page, under Certificate settings, provide the certificate details:

    1. Organization

      In the dropdown, select the organization you are requesting the client certificate for. Only prevalidated organizations appear in the dropdown. If you can't find the organization you are looking for, contact your manager.

      Note: The organization name appears on your client certificate.

    2. Organization unit

      Adding an organization unit is not required; you can leave this box blank.

      If you want to designate the organization unit the certificate will be used for, in the box, enter the organization unit name.

    3. Signature hash

      In the dropdown, select a signature hash.

    4. Validity period

      Select a validity period for the certificate: 1 year, 2 years, 3 years, custom expiration date, or custom length.

  3. Under Order options, in the Automatic renewal dropdown, select how often you want the certificate to be automatically renewed.

  4. Under Certificate(s) to request, enter the Recipient details:

    1. Recipient name (Common name)

      Recipient’s name as you want it to appear on the client certificate.

      If you are using a CSR to order your certificate, enter the fully qualified domain name (for example, www.example.com).

    2. Recipient email

      Email address that you want to appear on the certificate. Separate multiple email addresses with commas. The first email address listed is used to send the recipient an email so they can generate their client certificate.

  5. If you are using a CSR to order your certificate, upload or paste your CSR in the Recipient CSR box.

    We use the Public Key embedded in the CSR to create your client certificate. All other fields in the CSR are ignored.

    Note

    Your CSR must include the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags.

  6. To add additional client certificate recipients, select Add another certificate and enter the recipient’s Recipient details.

  7. Select payment method

    Under Payment information, select a payment method to pay for the certificate:

    1. Pay with credit card

      Don’t have a contract or don’t want to use the contract to pay for this certificate? Use a credit card to pay for the certificate.

      Note: We authorize the card when the request is made. However, we only complete the transaction once we issue your certificate.

    2. Pay with contract terms

      Have a contract and want to use it to pay for the certificate? Use the contract to pay.

      Note: When you have a contract, it is the default payment method.

    3. Pay with account balance

      Don’t have a contract or don’t want to use the contract to pay for this certificate? Bill the cost to your account balance.

      To deposit funds, click the Deposit link.

      Note

      The Deposit link takes you to another page inside your CertCentral account. Any information entered in the request form will not be saved.

  8. Certificate Services Agreement

    Read through the agreement and check I agree to the Certificate Services Agreement above.

  9. Select Submit certificate request.

What's next

You'll be taken to the certificate’s Order # details page where you can see the status of the email address verifications.

Each email address listed in the certificate request is sent an email containing a link so the recipient can validate that they own that email address. If the certificate recipient loses a validation email, you can resend it. See How to resend an email validation for DigiCert "client certificate" email.

After all email addresses are validated, a link will be sent to the first email address on the list so the recipient can create their client certificate.

Note

If you submitted a CSR, the client certificate will be attached to the "client certificate issued" email.

In this section: