These instructions apply to the following Client certificate types:
The instructions below apply to renewing a Premium certificate; differences for other Client certificate types are noted.
If required by your organization, create your CSR. To learn how to create a CSR, see Create a CSR (Certificate Signing Request).
Note: To remain secure, certificates must use 2048-bit keys.
In the sidebar menu, hover over Request a Certificate and then under Client Certificates, select client certificate you want to order.
On the Request a Client Certificate page, under Certificate Settings, provide the certificate details.
Under Order Options, in the Automatic Renewal dropdown, select how often you want the certificate to be automatically renewed.
Under Certificate(s) to Request, enter the Recipient Details:
If you are using a CSR to create your certificate, upload or paste your CSR in the Recipient CSR box. We use the Public Key embedded in the CSR to create your Client certificate; all other fields in the CSR are ignored.
Your CSR must include the
-----BEGIN NEW CERTIFICATE REQUEST----- and
-----END NEW CERTIFICATE REQUEST----- tags.
To add additional Client certificate recipients, click the Add Another Certificate link and enter the recipient’s Recipient Details.
Choose your payment information.
Note: If you need to deposit funds before continuing with the certificate order (clicking the Deposit link), your progress will not be saved.
Read and understand the Certificate Services Agreement, and check I agree to the Certificate Services Agreement above.
Click Submit Certificate Request.
You'll be taken to the certificate’s Manage Order # page where you can see the status of the email address verifications.
Each email address listed in the certificate request is sent an email that contains a link so that the recipient can validate that they own that email address. If the certificate recipient loses a validation email, you can resend it. See How to Resend an Email Validation for DigiCert "Client Certificate" Email.
After all email addresses are validated, a link will be sent to the first email address on the list so that the recipient can create their Client certificate.
Note: If you submitted a CSR, the Client certificate will be attached to the final email.
For instructions on how to install the Client certificate, see (Windows) Importing Your Personal ID Certificate.