Reissue a GeoTrust Cloud DV certificate
Notice
Industry standards change: End of 397-day maximum validity public TLS/SSL certificates
On February 24, 2026, DigiCert stopped issuing 397-day public DV, OV, and EV TLS/SSL and Qualified Website Authentication Certificates (QWAC) and QWAC PSD2 certificates. The new maximum TLS/SSL certificate validity is 199 days.
Learn more about the end of 397-day maximum validity public TLS/SSL certificates.
GeoTrust Cloud DV certificates use Subject Alternative Names (SANs) to let you secure multiple domains (example.com) and wildcard domains (*.example.com) with one certificate. Adding SANs to a GeoTrust Cloud DV certificate order may incur extra costs.
Create a certificate signing request (CSR): A CSR is required to reissue your certificate. To remain secure, certificates must use at least a 2048-bit key size. Need help creating a CSR? See Create a CSR (Certificate Signing Request).
In CertCentral, in the left menu, go to Certificates > Orders.
On the Orders page, use the menus and advanced search features to find the GeoTrust Cloud DV certificate you want to reissue.
In the certificate’s Order # column, select Quick view.
In the Order details pane (on the right side of the page), select Reissue certificate.
Add Your CSR: We take the common name and SANs in your CSR and add them to the Common name and Other hostnames (SANs) fields.
On the Reissue certificate for order page, use one of the following options to add your CSR:
Upload a CSR: Use this link to upload your CSR file to the Add your CSR box.
Paste CSR: Use a text editor to open your CSR file. Copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and enter it in to the Add your CSR box.
Common name: We take the common name in your CSR and add it to the Common name field. To add or change the common name, manually enter the domain you want the DV certificate to secure.
Changing the common name when reissuing a GeoTrust Cloud DV Certificate automatically revokes the original certificate and any previous reissues unless you add the old common name as a SAN on the reissued certificate.
Other hostnames (SANs): We take any SANs in your CSR and add them to the Other hostnames (SANs) field. Add, remove, and reorder SANs as needed so the certificate secures the domains you want.
Add SANs: In the Other hostnames (SANs) box, enter the additional SANs you want included in the reissued certificate. Adding SANs doesn’t revoke the original certificate or previous reissues. However, adding SANs may incur extra charges for the certificate reissue.
Remove SANs: In the Other hostnames (SANs) box, delete the SANs that you want to exclude in the reissued certificate. Removing SANs automatically revokes the original certificate or previous reissues.
Select payment method: Did you add SANs to the certificate reissue order? Under Payment information, select a payment method to pay for the certificate. Didn't add SANs? Skip to the next step.
Pay with contract terms: This is the default payment method for contract clients.
Pay with credit card
Pay with account balance: To deposit funds, select the Deposit link. Important: The Deposit link takes you to another page in your CertCentral account. Any information entered in the request form isn't saved.
Signature hash: SHA-256 is the sole signature hash available for DV certificates.
Select a DCV method to prove control over your domain: Before DigiCert can reissue your DV certificate, you must demonstrate control over the domains in your certificate order. To learn more, see Validate domains on a DV certificate order.
In the DCV verification method menu, select the method you want to use to demonstrate control over the domains on the certificate order. Use the selected DCV method to prove control over every domain on the order.
DNS TXT With this DCV method, you demonstrate control by creating a DNS TXT record with a randomly generated value.
Email With this DCV method, an email recipient to demonstrate control by following the instructions in a confirmation email sent for the domain.
File With this DCV method, you to demonstrate control by hosting a fileauth.txt file with a randomly generated value at a predetermined location on your website.
Note
After submitting your reissue order, you can change the DCV method. In the sidebar menu, select Certificates > Orders. On the Orders page, in the Order # column of the DV certificate order, select the order number.
Select the language for the DCV email: In the DCV email language menu, select your preferred language.
Select Request reissue.