Configure renewal notifications

Determine when renewal notifications are sent. Assign email addresses to receive renewal notices at every stage as certificates get closer to expiring or after they have expired.

By default, renewal notifications are sent to the primary CertCentral administrator (typically, the individual who created the account) at 90, 60, 30, 7, and 3 days before a certificate expires and 7 days after a certificate expires.

Configure renewal notifications

  1. In your CertCentral Account, in the left main menu, go to Settings > Notifications.

  1. On the Notifications page, on the Notification settings tab, expand Advanced notification settings.

  1. Scroll down the page and turn OFF the Custom contacts escalation for renewal (expiring) and expired certificate emails.

  1. When certificates are scheduled to expire in

    Check the boxes for when you want renewal notices sent.

    • 90 days
    • 60 days
    • 30 days
    • 7 days
    • 3 days
    • 7 days after expiration

For example, you check 30 days, 7 days, and 3 days. Then, we won't send renewal notices 90 and 60 days before certificates expire. We also won't send notifications 7 days after certificates expire.

  1. Enter additional emails to receive renewal notifications

    In the box, enter the email addresses you want to receive the renewal notifications (comma separated). These email addresses receive notifications at every stage as certificates get closer to expiring or after they have expired.

  1. Add an optional custom message to be included in renewal emails (optional)

    In the box, type a renewal message to include in all renewal notification emails.

  1. Other renewal notifications

    By default, CertCentral only sends renewal notifications for TLS, Code Signing, and Document Signing certificates. To receive renewal notifications for client certificates or non-DigiCert certificates discovered using our Discovery tool, check the corresponding box:

    • Turn on client certificate renewal notifications
    • Turn on discovered non-DigiCert certificates
  1. When done, click Save Settings.

What's next

Going forward, CertCentral will use the updated certificate renewal settings to determine when and to who certificate renewal notifications are sent.