Documentation
  • Change log
  • Developers
  • Live Chat
    Talk to a support representative
    Chat now
    Americas
    1.800.896.7973 (Toll Free US and Canada) 1.801.701.9600 1.877.438.8776 (Sales Only)
    Asia Pacific, Japan
    +61.3.9674.5500
    Europe, Middle East Africa
    +44.203.788.7741
    Email sales Email support
  1. Documentation
  2. Manage certificates
  • Get started
    • Set up your CertCentral account
  • Manage certificates
    • Client Certificates Guide
      • Issue Client certificates (Admin)
      • Reissue Client certificates (Admin)
      • Renew Client certificates (Admin)
      • Cancel pending client certificate orders
      • Cancel pending Client certificate reissues
      • Client certificate revocation process
        • Revoke a client certificate
        • Approve client certificate revocation request (Admin)
      • Resend the email validation for DigiCert client certificate email
      • Resend the create your DigiCert client certificate email
      • Turn on Client certificate renewal notifications
      • Configure Client certificate approval process
      • Generate your Client certificate
      • Manage your Personal ID certificate
        • (Windows) Export your Personal ID certificate
          • Internet Explorer: Export your Personal ID certificate
          • Google Chrome: Export your Personal ID certificate
          • Firefox: Export your Personal ID certificate
        • (Windows) Import your Personal ID certificate
          • Internet Explorer: Import your Personal ID certificate
          • Google Chrome: Import your Personal ID certificate
          • Mozilla Firefox: Import your Personal ID certificate
      • Configure Outlook to use your Email Security Plus Personal ID Certificate
    • SAML Admin Certificate Requests Guide
      • SAML Certificate Requests prerequisites
      • SAML Certificate Requests service workflow
      • SAML request a certificate workflow
      • Configure SAML Certificate Requests
      • Turn off SAML Certificate Requests
      • Restore access to SAML Certificate Requests accounts
      • SAML: Request a client certificate
      • SAML: Generate your client certificate
      • SAML: Download a copy of your client certificate
      • SAML: Submit a request to revoke a client certificate
      • SAML: Resend the Create Your DigiCert Client Certificate email
      • Allow Access to SAML Settings
        • Add a manager with the SAML permission
        • Edit a manager account and assign them the SAML permission
    • Secure Site certificate benefits
      • Access Secure Site priority support
      • Access Secure Site site seal
      • Access Secure Site malware check
    • Revoke an issued SSL/TLS certificate
      • Submit a request to revoke an SSL/TLS certificate
      • Approve (or reject) a certificate revocation request
    • Get a copy of your SSL/TLS certificate
      • Download a certificate from your account
      • Email a certificate from your CertCentral account
    • Add or replace the CSR on a pending certificate order
    • Order your SSL/TLS certificates
      • Order an OV single or multi-domain SSL/TLS certificate
      • Order an EV single or multi-domain SSL/TLS certificate
      • Order an OV wildcard SSL/TLS certificate
    • Autopopulate Organization Unit field (enterprise accounts only)
    • Organization and domain management
      • Validation process
      • Organization validation
      • Domain validation
      • Manage organizations
        • Add an organization
        • Submit an organization for pre-validation
        • Enable adding non-CertCentral account users as verified contacts
      • Manage domains
        • Domain pre-validation: Domain control validation (DCV) methods
        • Hide alternative domain control validation (DCV) methods
        • Add a domain, authorize the domain for certificates, and use verification email as the DCV method
        • Add a domain, authorize the domain for certificates, and use DNS CNAME record as the DCV method
        • Add a domain, authorize the domain for certificates, and use DNS TXT as the validation method
        • Add a domain, authorize the domain for certificates, and use HTTP practical demonstration as the validation method
        • Common mistakes: HTTP practical demonstration DCV method
        • Change a domain's domain control validation (DCV) method
      • Domain validation (pending order): Domain control validation (DCV) methods
        • Domain Validation (Pending Order): Use the Verification Email DCV Method
        • Domain Validation (Pending Order): Use the DNS CNAME Record DCV Method
        • Domain Validation (Pending Order): Use the DNS TXT Record DCV Method
        • Domain Validation (Pending Order): Use the HTTP Practical Demonstration DCV Method
      • DNS CAA resource record check
    • Manage certificate request approvals
      • Approve a certificate request
      • Remove the approval step from the certificate order process
      • Enable automatic certificate request approvals
    • Grant a Limited user access to a certificate order
    • Automatic certificate renewal
      • Turn on automatic certificate renewals
      • Turn off automatic certificate renewals
      • Set default user for Auto-Renew certificate orders
    • Individual Certificate Renewal Notifications
      • Turn Off Renewal Notifications for a Certificate Order
      • Turn on Renewal Notifications for a Certificate Order
    • Basic and Business SSL/TLS Certificate Enrollment
    • Demonstrate control over domains on a pending certificate order
      • Use the Email DCV method to verify domain control
      • Use the DNS CNAME validation method to verify domain control
      • Use the DNS TXT validation method to verify domain control
      • Use the HTTP Practical Demonstration validation method to verify domain control
      • Common mistakes: HTTP Practical Demonstration DCV method
        • Don’t modify the URL provided
        • Don't place verificationtoken.txt on a different domain or subdomain
        • Don't include additional content in the verificationtoken.txt file
        • Don't place the verificationtoken.txt file on a page with multiple redirects
    • Cancel a certificate order
    • Get a copy of your SSL certificate
      • Download a certificate from your account
      • Email a certificate from your CertCentral account
    • Choose the language preference for your account
    • Logging Public SSL/TLS Certificates to Public CT Logs
      • Will DigiCert Log All Certificates to Public CT Logs?
      • When and When Not to Log Public SSL/TLS Certificates
      • Keeping SSL/TLS Certificates Out of Public CT Logs
      • Methods for Keeping SSL/TLS Certificates Out of CT Logs
      • Allow Users to Keep Certificates Out of CT Logs
        • CT Logging Certificate Detail Added
        • Enable the CT Log Exclusion Feature for Your Account
        • See if a Certificate Was Logged to CT Logs
      • Turn Off CT Logging for Your Account
      • Check if CT Logging Is Disabled for Your Account
      • Add an Unlogged SSL/TLS Certificate to Public CT Logs
    • DV Certificate Enrollment
      • Ordering DV Certificates
        • Order a RapidSSL Standard DV Certificate
        • Order a RapidSSL Wildcard DV Certificate
        • Order a GeoTrust Standard DV Certificate
        • Order a GeoTrust Wildcard DV Certificate
        • Order a GeoTrust Cloud DV Certificate
      • Canceling a DV Certificate Order
      • Domain Control Validation (DCV) Methods
        • Use the Email DCV method
        • Use the DNS TXT DCV Method
        • Use the File DCV Method
        • File DCV method common mistakes
      • Accessing a DV Certificate
        • Download a DV Certificate
        • Email a DV Certificate from Your CertCentral Account
      • Reissuing DV Certificates
        • Reissue a RapidSSL Standard DV Certificate
        • Reissue a RapidSSL Wildcard DV Certificate
        • Reissue a GeoTrust Standard DV Certificate
        • Reissue a GeoTrust Wildcard DV Certificate
        • Reissue a GeoTrust Cloud DV Certificate
      • Canceling pending reissues on DV Certificates
      • Renewing DV Certificates
        • Renew a RapidSSL Standard DV Certificate
        • Renew a RapidSSL Wildcard DV Certificate
        • Renew a GeoTrust Standard DV Certificate
        • Renew a GeoTrust Wildcard DV Certificate
        • Renew a GeoTrust Cloud DV Certificate
      • Revoke an Issued DV Certificate
        • Submit a Request to Revoke a DV Certificate
        • Approve (or Reject) a Certificate Revocation Request
    • Public certificates – Data entries that violate industry standards
    • Certificate profile options
      • Get your Signed HTTP Exchanges certificate
      • Holen Sie sich Ihr Signed-HTTP-Exchange-Zertifikat
      • Demande de certificat Signed HTTP Exchange
      • SXG (Signed HTTP Exchanges)証明書を取得する
    • Renew an SSL/TLS certificate
    • Code signing certificates
      • Protect private keys
      • Order a Code Signing certificate
      • Reissue or re-key a Code Signing certificate
      • Renew a code signing certificate
    • Document signing certificates
      • Renew a document signing certificate
    • Reissue an SSL/TLS certificate
    • Duplicate an SSL/TLS certificate
      • Secure Site Pro: Duplicate a TLS certificate
  • Certificate tools
    • Discovery user guide
      • Discovery prerequisites
      • Discovery workflow and permissions
      • Sensor installation requirements
      • Install a sensor
        • Linux: Install a sensor
        • Microsoft Windows: Install a sensor
        • Virtual appliance: Install a sensor
      • Sensor file structure
      • Sensor troubleshooting
      • Configure a sensor to use a proxy server for communications
        • Change sensor proxy settings
        • Retrieve sensor proxy settings
      • Activate a sensor
        • Linux: Activate a sensor
        • Microsoft Windows: Activate or start a sensor
      • Restart a sensor
        • Linux: Restart a sensor
        • Microsoft Windows: Restart a sensor
      • Rename the sensor
      • Set up and run a scan
      • Edit a scan
      • Add public and private root and intermediate CAs
      • Blacklist IP addresses and FQDNs
      • Discovery renewal notices
        • Renewal notifications
        • Disable renewal notices
        • Enable renewal notices
      • TLS/SSL certificate vulnerabilities
        • Certificate name mismatch
        • Internal names
        • Missing or misconfigured fields and values
        • SHA-1 hashing algorithm
        • Weak hashing algorithm
        • Weak keys
      • TLS/SSL endpoint vulnerabilities
        • BEAST
        • BREACH
        • CRIME
        • FREAK
        • Heartbleed bug
        • Logjam attack
        • RC4 cipher enabled
        • DROWN
        • POODLE (SSLv3)
        • Sweet32
        • POODLE (TLS)
    • ACME user guide
      • ACME Directory URLs for Signed HTTP Exchange certificates
      • ACME Beta: Known issues
    • Post-Quantum Cryptography
      • PQC toolkit setup guide
      • PQC dockerized toolkit guide
    • CT log monitoring service
      • Enable CT log monitoring
      • Disable CT log monitoring
  • Manage account
    • SAML Admin Single Sign-On Guide
      • SAML Single Sign-on prerequisites
      • SAML service workflow
      • Configure SAML Single Sign-On
      • Turn off SAML Single Sign-on
      • Restore SAML Single Sign-on for CertCentral accounts
      • Allow access to SAML Settings permission
        • Add a manager with the SAML permission
        • Edit a manager account and assign them the SAML permission
      • Managing SAML Single Sign-on (SSO) users
        • Administrators and managers: SAML SSO-only versus SAML SSO account
        • SAML SSO account users versus SAML SSO-only users
        • Difference when converting SAML SSO-only and SAML SSO account users
        • Add a SAML SSO-only or a SAML SSO account user
        • Convert a SAML SSO-only or SAML SSO account user
        • SAML SSO: Invite users to join your account
    • Unlock a "locked" CertCentral account
    • Add a credit card to your CertCentral account
      • Deactivate an account credit card
    • Add a new user to your CertCentral account
    • CertCentral user roles and account access
      • Unrestricted versus restricted
      • Roles and account access
      • Subroles
    • CertCentral language preferences
    • Manage users
      • Add a user to your CertCentral account
      • Resend the create account instructions to a new user
      • Invite users to join your CertCentral account
      • Create your user account
      • Approve a new user's account
      • Unlock a locked account
    • Division management
      • Create a division
    • Customize your certificate request forms
      • Manage custom order form fields
        • Custom order forms fields features
        • Add a custom field to your request forms
        • Deactivate a custom order form field
        • Activate a custom order form field
        • Pending requests: Finish required and optional custom fields
        • Use your custom fields to search for specific orders
      • Limit who can add new organizations from request forms
      • Limit who can add new contacts from request forms
    • Manage Guest URLs
      • Create a Guest URL
      • Send a Guest URL to non-CertCentral account holders
      • Edit a Guest URL
      • Delete a Guest URL
      • View Guest URLs
    • Account Notifications
      • Set up account email notifications
      • Certificate renewal notifications
        • Configure Non-Escalation Renewal Notifications
        • Configure Escalation Renewal Notifications
    • Configure Private SSL certificate products
  • Upgrade to CertCentral
    • What should I know before I upgrade to CertCentral?
    • Where are my certificates?
    • Where do I manage payment options?
    • Where do I manage my organization information?
    • How does CertCentral make managing certificates easier?
    • How do I move CWS discovery to CertCentral Discovery?
      • How do I prepare my CWS sensors for CertCentral Discovery?
      • How do my CWS discovery settings get transferred to CertCentral?
      • What changes should I look for in CertCentral Discovery?
      • Repoint a CWS sensor to the CertCentral cloud service

Manage certificates

Documentation on how to request, manage, and modify SSL/TLS and other types of certificates in your CertCentral account.

  • Client Certificates Guide
  • SAML Admin Certificate Requests Guide
  • Secure Site certificate benefits
  • Revoke an issued SSL/TLS certificate
  • Get a copy of your SSL/TLS certificate
  • Add or replace the CSR on a pending certificate order
  • Order your SSL/TLS certificates
  • Autopopulate Organization Unit field (enterprise accounts only)
  • Organization and domain management
  • Manage certificate request approvals
  • Grant a Limited user access to a certificate order
  • Automatic certificate renewal
  • Individual Certificate Renewal Notifications
  • Basic and Business SSL/TLS Certificate Enrollment
  • Demonstrate control over domains on a pending certificate order
  • Cancel a certificate order
  • Get a copy of your SSL certificate
  • Choose the language preference for your account
  • Logging Public SSL/TLS Certificates to Public CT Logs
  • DV Certificate Enrollment
  • Public certificates – Data entries that violate industry standards
  • Certificate profile options
  • Renew an SSL/TLS certificate
  • Code signing certificates
  • Document signing certificates
  • Reissue an SSL/TLS certificate
  • Duplicate an SSL/TLS certificate

About

DigiCert is the world’s premier provider of high—assurance digital certificates—providing trusted SSL, private and managed PKI deployments, and device certificates for the emerging IoT market. Since our founding almost fifteen years ago, we’ve been driven by the idea of finding a better way. A better way to provide authentication on the internet. A better way to tailor solutions to our customer’s needs. Now, we’ve added Symantec’s experience and talent to our legacy of innovation to find a better way to lead the industry forward, and build greater trust in identity and digital interactions.

©2019 DigiCert, Inc. All rights reserved. DigiCert and its logo are registered trademarks of DigiCert, Inc. Symantec and Norton and their logos are trademarks used under license from Symantec Corporation. Other names may be trademarks of their respective owners.

  • Resources
    • Support
    • Tools
    • Blog
    • FAQs
  • Company
    • About Us
    • Newsroom
    • Contact Us
  • Legal
    • Terms of Use
    • Privacy Policy
    • Legal Repository
    • WebTrust Audits

This site uses cookies and other tracking technologies to assist with navigation and your ability to provide feedback, analyze your use of our products and services, assist with our promotional and marketing efforts, and provide content from third parties. Read our Cookie Policy and Privacy Policy to learn more.