Issue Client certificates (Admin)

Before you begin

These instructions apply to the following Client certificate types:

  • Digital Signature Plus
  • Email Security Plus
  • Authentication Plus
  • Premium

Issue a Client certificate

The instructions below apply to renewing a Premium certificate; differences for other Client certificate types are noted.

  1. If required by your organization, create your CSR. To learn how to create a CSR, see Create a CSR (Certificate Signing Request).

Note: To remain secure, certificates must use 2048-bit keys.

  1. In the sidebar menu, hover over Request a Certificate and then under Client Certificates, select client certificate you want to order.

  1. On the Request a Client Certificate page, under Certificate Settings, provide the certificate details.

  2. Under Order Options, in the Automatic Renewal dropdown, select how often you want the certificate to be automatically renewed.

  3. Under Certificate(s) to Request, enter the Recipient Details:

    1. Recipient Name (Common Name)
      Enter the recipient’s name as you want it to appear on the Client certificate.

      If you are using a CSR to create your certificate, enter the fully qualified domain name (for example, www.example.com).
    2. Recipient Email
      The email address that you want to appear on the certificate. Separate multiple email addresses with commas. The first email address listed is used to send the recipient an email so that they can generate their Client certificate.

  4. If you are using a CSR to create your certificate, upload or paste your CSR in the Recipient CSR box. We use the Public Key embedded in the CSR to create your Client certificate; all other fields in the CSR are ignored.

Your CSR must include the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags.

  1. To add additional Client certificate recipients, click the Add Another Certificate link and enter the recipient’s Recipient Details.

  2. Choose your payment information.

    • If you have a contract, your default payment method will use your contract.
    • If you do have a contract, check the box to exclude this certificate from your contact.

Note: If you need to deposit funds before continuing with the certificate order (clicking the Deposit link), your progress will not be saved.

  1. Read and understand the Certificate Services Agreement, and check I agree to the Certificate Services Agreement above.

  2. Click Submit Certificate Request.

What's next

You'll be taken to the certificate’s Manage Order # page where you can see the status of the email address verifications.

Each email address listed in the certificate request is sent an email that contains a link so that the recipient can validate that they own that email address. If the certificate recipient loses a validation email, you can resend it. See How to Resend an Email Validation for DigiCert "Client Certificate" Email.

After all email addresses are validated, a link will be sent to the first email address on the list so that the recipient can create their Client certificate.

Note: If you submitted a CSR, the Client certificate will be attached to the final email.

For instructions on how to install the Client certificate, see (Windows) Importing Your Personal ID Certificate.

About

DigiCert is the world’s premier provider of high—assurance digital certificates—providing trusted SSL, private and managed PKI deployments, and device certificates for the emerging IoT market. Since our founding almost fifteen years ago, we’ve been driven by the idea of finding a better way. A better way to provide authentication on the internet. A better way to tailor solutions to our customer’s needs. Now, we’ve added Symantec’s experience and talent to our legacy of innovation to find a better way to lead the industry forward, and build greater trust in identity and digital interactions.

©2019 DigiCert, Inc. All rights reserved. DigiCert and its logo are registered trademarks of DigiCert, Inc. Symantec and Norton and their logos are trademarks used under license from Symantec Corporation. Other names may be trademarks of their respective owners.