Reissue a GeoTrust Standard DV Certificate

Industry standards change: End of 2-year public SSL/TLS certificates

On August 27, 2020, 6:00 PM MDT (August 28 00:00 UTC), DigiCert stopped issuing public DV, OV, and EV SSL/TLS certificates with a maximum validity greater than 397 days.

Now, 2-year public SSL/TLS certificate reissues have a max validity of 397 days. This means some reissued certificates will expire before the order expires. To use the remaining validity included with the original certificate, reissue certificates during the order's final 397-day period.

To learn more, see End of 2-year DV, OV, and EV public SSL/TLS certificates.

Use these instructions to reissue a GeoTrust Standard DV Certificate.

GeoTrust Standard DV Certificates use Subject Alternative Names (SANs) to let you secure up to 250 domains. The base price includes only one Fully Qualified Domain Name (FQDN). Adding SANs to a GeoTrust Standard DV certificate order may incur additional costs.

A Certificate Signing Request (CSR) is required to complete the reissue order.

Create a Certificate Signing Request
To remain secure, certificates must use at least a 2048-bit key size. Need help creating a CSR? See Create a CSR (Certificate Signing Request).
In your CertCentral account, in the sidebar menu, click Certificates > Orders.
On the Orders page, use the drop-down lists, search box, advance search features (Show Advanced Search link), and column headers to find the GeoTrust Standard DV certificate you want to reissue.
In the certificate’s Order # column, click the Quick View link.
In the Order details pane (on the right side of the page), click the Reissue Certificate link.
Add Your CSR
We take the common name and any SANs included in your CSR and add them to the Common Name and Other Hostnames (SANs) field.
On the Reissue Certificate for Order page, use one of the options below to add your CSR:
1. Click to upload a CSR
  Click the link to upload your CSR file to the Add Your CSR box.
2. Paste CSR
  Use a text editor to open your CSR file. Copy the text, including the -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST----- tags, and paste it into the Add Your CSR box.
Common Name
We take the common name included in your CSR and add it to the Common Name field.
To add or change the common name, manually enter the domain you want the DV certificate to secure.

Changing the common name when reissuing a GeoTrust Standard DV Certificate automatically revokes the original certificate and any previous reissues unless you add the old common name as a SAN on the reissued certificate. .

Other Hostnames (SANs)
We take any SANs included in your CSR and add them to the Other Hostnames (SANs) field.
Add, remove, and reorder SANs as needed so the certificate secures the domains you want:
1. Add SANs
  In the Other Hostnames (SANs) box, enter the additional SANs you want included in the reissued certificate.
  Adding SANs does not revoke the original certificate or previous reissues. However, adding SANs may incur additional charges for the certificate reissue.
2. Remove SANs
  In the Other Hostnames (SANs) box, delete the SANs that you want to exclude in the reissued certificate.

Removing SANs automatically revokes the original certificate or previous reissues.

Select Payment Method
Did you add SANs to the certificate reissue order? Under Payment Information, select a payment method to pay for the certificate.
If you didn't add SANs, skip to the next step. You won't be charged for your reissue.
1. Pay with Contract Terms
  Have a contract and want to use it to pay for the certificate? If yes, you may use it.
  Note: When you have a contract, it is the default payment method.
2. Pay with Credit Card
  Don’t have a contract or don’t want to use the contract to pay for this certificate? Use a credit card to pay for the certificate.
3. Pay with Account Balance
  Don’t have a contract or don’t want to use the contract to pay for this certificate? Bill the cost to your account balance.
  To deposit funds, click the Deposit link.

The Deposit link takes you to another page in your CertCentral account. Any information entered in the request form will not be saved.

Signature Hash
SHA-256 is the only signature hash available for DV certificates.
Select a DCV Method to prove control over your domain
Before DigiCert can reissue your DV certificate, you must demonstrate control over the domains in your certificate order. To learn more about the available DCV Methods, see Domain Control Validation (DCV) Methods.
In the DCV verification method drop-down list, choose the DCV method you want to use for demonstrating control over the domains on the certificate order.
You must use the selected DCV method to prove control over every domain on the order:
- DNS TXT
  The DNS TXT DCV method allows you to demonstrate control over the domain in your order by creating a DNS TXT record with a randomly generated value.
- Email
  The Email DCV method allows an email recipient to demonstrate control over the domain by following the instructions in a confirmation email sent for the domain.
- File
  The File DCV method allows you to demonstrate control over your domain by hosting a fileauth.txt file with a randomly generated value at a predetermined location on your website.

After submitting your reissue order, you can change the DCV method from the certificate's Order # details page, if needed.

In the sidebar menu, click Certificates > Orders. On the Orders page, in the Order # column of the DV certificate order, click the order number link.

Select the language for the DCV email
In the DCV Email Language drop-down list, select the language you want DCV authentication email to be sent in.
Note: This drop-down list only appears when you select Email as your DCV method.
Reason for Reissue
Add a reason for the reissue that only an Administrator can see.

These comments are not included in the certificate.

When you are finished, click Request Reissue.

About