Reissue Client certificates (Admin)

Before you begin

Use these instructions to reissue the following types of Client certificates:

  • Digital Signature Plus
  • Email Security Plus
  • Authentication Plus
  • Premium

The process for reissuing any type of Client certificate in your CertCentral account is the same:

  • If required by your organization, create a Certificate Signing Request (CSR).
  • Fill out the Client certificate request form.
  • Wait for approval.

Reissue a Premium Client certificate

These instructions apply to reissuing a Premium certificate; differences for other Client certificate types are noted.

  1. If required by your organization, create your CSR. Learn how to create a CSR, see Create a CSR (Certificate Signing Request).

To remain secure, certificates must use 2048-bit keys.

  1. In your CertCentral account, in the sidebar menu, click Certificates > Orders.

  2. On the Orders page, locate the Premium client certificate you need to reissue.

  3. In the Order # column, click Quick View on the certificate you want to reissue.

  4. In the Order details panel, click Reissue Certificate.

  5. On the Reissue Certificate for Order page, under Recipient Details, verify that the information is correct.

    1. Recipient Name (Common Name)
      Recipient's name as you want it to appear on the certificate.

      If you are using a CSR, enter a fully qualified domain name (for example, www.example.com)
    2. Recipient Email
      The email address that you want to appear on the certificate. Separate multiple email addresses with commas.

      The first email address listed is used to send the recipient an email so that they can generate their Client certificate.
    3. If you are using a CSR to create your certificate, upload or paste your CSR in the Recipient CSR box. We use the Public Key embedded in the CSR to create your Client certificate; all other fields in the CSR are ignored.

Your CSR must include the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags.

  1. In the Signature Hash dropdown, select a signature hash.

  2. In the Reason for Reissue box, specify a reason for the certificate reissue.

  3. Click Request Reissue.

What's next

You'll be taken to the certificate’s Manage Order # page where you can see the status of the email address verifications.

Each email address listed in the certificate request is sent an email that contains a link so that the recipient can validate that they own that email address. If the certificate recipient loses a validation email, you can resend it. See How to Resend an Email Validation for DigiCert "Client Certificate" Email.

After all email addresses are validated, an email is sent to the first email address on the list so that the recipient can create their Client certificate.

Note: If you submitted a CSR, then the Client certificate will be attached to the final email..

For instructions on how to install the Client certificate, see (Windows) Importing Your Personal ID Certificate.

About

DigiCert is the world’s premier provider of high—assurance digital certificates—providing trusted SSL, private and managed PKI deployments, and device certificates for the emerging IoT market. Since our founding almost fifteen years ago, we’ve been driven by the idea of finding a better way. A better way to provide authentication on the internet. A better way to tailor solutions to our customer’s needs. Now, we’ve added Symantec’s experience and talent to our legacy of innovation to find a better way to lead the industry forward, and build greater trust in identity and digital interactions.

©2019 DigiCert, Inc. All rights reserved. DigiCert and its logo are registered trademarks of DigiCert, Inc. Symantec and Norton and their logos are trademarks used under license from Symantec Corporation. Other names may be trademarks of their respective owners.