DigiCert annual plans
DigiCert® annual plans provide one year of TLS/SSL certificate coverage. However, each TLS certificate issued under the plan is valid for up to 199 days. To keep coverage active for the full year, you must reissue and install a new certificate before the active certificate expires.
The reissued certificate is valid until the annual plan expires or for 199 days, whichever comes first. To get the full 199 days on the reissued certificate, reissue the certificate at least 32 days before the current certificate expires.
Important:
As of February 24, 2026, DigiCert TLS certificate orders will be one year by default. Contact your account manager or DigiCert Support if interested in using 2- and 3-year plans.
The default-order change affects TLS certificate products.
In this article
When to reissue a certificate on an annual plan
When the active certificate for your annual plan is about to expire, reissue and install the new certificate to maintain your TLS certificate coverage. Reissuing a certificate doesn’t update the expiring certificate on your website. You must replace the expiring certificate with the reissued certificate.
For example, you order a Basic OV TLS certificate. You get an annual plan with a 199-day TLS certificate, the maximum certificate validity allowed by the industry.
To get the full 199 days on the reissued certificate, DigiCert recommends reissuing it at least 32 days before the current certificate expires.
If you reissue the certificate more than 32 days before the current certificate expires, the reissued certificate can receive the full 199 days. However, the annual plan may still have time remaining after the reissued certificate expires. The next time the certificate is about to expire, you can either:
Reissue the certificate with reduced certificate validity
Renew the certificate and annual plan order together
Plan validity | Certificate validity | When the certificate is reissued | Reissued certificate validity | Days remaining on plan |
|---|---|---|---|---|
365 days | 199 days | 90 days before the certificate expires | 199 days | 58 days |
365 days | 199 days | 60 days before the certificate expires | 199 days | 28 days |
365 days | 199 days | 32 days before the certificate expires | 199 days | 0 days |
365 days | 199 days | 30 days before the certificate expires | 197 days | 0 days |
365 days | 199 days | 7 days before the certificate expires | 173 days | 0 days |
365 days | 199 days | The same day the certificate expires | 166 days | 0 days |
Options available when reissuing a certificate on an annual plan
When you reissue a certificate on an annual plan, you can:
Set the expiration date for the reissued certificate.
The reissued certificate can be valid for up to 199 days or through the end of the order validity period, whichever is sooner.
Change or remove domains.
Changing or removing domains requires DigiCert to revoke all previously issued certificates. DigiCert waits 48–72 hours before revoking the original certificate and any existing duplicates and reissues
Add domains.
Adding domains may result in extra costs. Prices for new domains are prorated and applied based on the remaining time on the annual plan.
Accounts and integrations that don’t use annual plans
CertCentral Subscription accounts and Enterprise accounts with subscription contracts don’t use annual plans.
CertCentral Subscriptions
With CertCentral Subscriptions, you pay for 12 months of domain protection based on the certificate type you use to protect the domain. You can issue as many certificates as needed for protected domains at no extra cost. When the subscription renews at the end of 12 months, the domain protection renews at the full 12-month price.
Enterprise subscription contracts
With subscription contracts, your billing is based on the peak usage of certificates over one year.
CertCentral Services API integrations
Your API integrations will continue to work as they did before TLS certificate orders became one year by default.
Switch to a CertCentral Subscription account
CertCentral Subscriptions don’t use annual plans or Multi-year Plans. Instead, you pay yearly for the assets you want to protect with your digital certificates. To learn more about the subscription model, go to Set up your CertCentral subscription.
Reissuing expiring annual plan and MyP certificates
After you convert to the subscription model, you can still access your annual plans and Multi-year Plans from the Legacy Orders page and reissue certificates.
In the CertCentral main menu, go to My Digital Trust Products > Legacy Orders.
On the Legacy Orders page, select the order number for the annual plan or MyP certificate you need to reissue.
Renew subscriptions instead of extending plans
With CertCentral Subscriptions, you don’t extend annual plans or Multi-year Plans. Instead, you renew the subscription for the protected asset.