Ask a Question

Solution ID : SO22159

Reissue an SSL Certificate from a GeoTrust Security Center (GSC) Account

Solution

NOTE:  As of June 13, 2013, only the following products will be available for reissuance using this methods in this article:

  • Retail True Business ID with Extended Validation
  • Retail True Business ID
  • Retail True Business ID Wildcard
  • Retail QuickSSL Premium
  • Retail QuickSSL Premium Wildcard


To reissue an SSL certificate from GeoTrust Security Center account, follow one of the suggested methods:

Method 1: Reissue a Retail SSL certificate that originates from GeoTrust Security Center (GSC) Account
Method 2: Reissue a Retail SSL certificate with SANs from GeoTrust Security Center (GSC) Account
Method 3: Reissue a Retail  SSL certificate that is NOT within a GeoTrust Security Center (GSC) Account

 

Method 1: Reissue a Retail SSL certificate that originates from GeoTrust Security Center (GSC) Account:

Watch GeoTrust's Tutorial Videos for a more visual experience!

Note:  If you are unable to view the video, please click here to go directly to the video source.

  1. Sign in to the GeoTrust Security Center (GSC) account
  2. Within the list of certificates, click the Certificate entry that needs to be reissued
  3. Scroll down on the page
  4. Under the Order Summary tab, Click Reissue



     
  5. Review Certificate Information and make sure this is the correct certificate
  6. Select the Server Platform
  7. Copy and Paste the new Certificate Signing Request (CSR) where requested on the web form
  8. Select your Signature hash algorithm by clicking Edit
  9. Click Submit CSR


NOTE: Reissuing an SSL certificate does not add the certificate to Certificate Revocation List (CRL) or immediately flag the certificate as revoked status through Online Certificate Status Protocol (OCSP) responder. The previous issued certificate should be removed from the server or device. Once the latest reissue certificate is issued and confirmed working, you need to revoke the previous certificate. To revoke an SSL certificate immediately, refer to article:  INFO1972

 

Method 2: Reissue a Retail SSL certificate with SANs from GeoTrust Security Center (GSC) Account:

  1. Sign in to the GeoTrust Security Center (GSC) account
  2. Within the list of certificates, click the Certificate entry that needs to be reissued
  3. Scroll down on the page
  4. Under the Order Summary tab, click Manage SANs



     
  5. To manage Subject Alternative Names (SANs) of issued SSL certificate. There are 3 possible ways to choose from.
     
    • To edit & change the value of current issued SANs. Type the desired hostname within the Subject alternative name field.



       
    • To edit & delete the current issued SANs. Click the red X mark.



       
    • To add additional SANs, click Purchase SAN


       
  6. Click Continue
  7. Accept Terms and Conditions, then click Order & Continue
  8. Select the correct server (i.e. Apache, Microsoft IIS server or Other)
  9. Copy and Paste the new Certificate Signing Request (CSR) where requested on the web form
  10. Select the Signature hash algorithm by clicking Edit
  11. Select the Certificate Transparency by clicking Edit
  12. Click Submit CSR
     

NOTE: Reissuing an SSL certificate does not add the certificate to Certificate Revocation List (CRL) or immediately flag the certificate as revoked status through Online Certificate Status Protocol (OCSP) responder. The previous issued certificate should be removed from the server or device. Once the latest reissue certificate is issued and confirmed working, you need to revoke the previous certificate. To revoke an SSL certificate immediately, refer to article:  INFO1972

 

Method 3: Reissue a Retail SSL certificate that is NOT within a GeoTrust Security Center (GSC) account:

  1. Visit GeoTrust certificate search page.
    Note: You may be presented with a list of order numbers. Select the most current certificate.

  2. Type the Common name or Order Number of the certificate and click Search.
  3. Confirm the certificate details and click Reissue.


     
  4. You are prompted to create a new GeoTrust Security Center account. Click Create an Account.

  5. Complete the order form and submit a Certificate Signing Request (CSR).

NOTE: Reissuing an SSL certificate does not add the certificate to Certificate Revocation List (CRL) or immediately flag the certificate as revoked status through Online Certificate Status Protocol (OCSP) responder. The previous issued certificate should be removed from the server or device. Once the latest reissue certificate is issued and confirmed working, you need to revoke the previous certificate. To revoke an SSL certificate immediately, refer to article:  INFO1972