The key point
Reissue replaces a certificate during the existing service. With a renewal, you purchase the next service period. Neither includes installing files on your server.
Reissue: a new certificate, same service
Reissue replaces a certificate within the existing service period. Use it for an upcoming certificate expiry, a new key or a replacement after compromise. Check the product reissue terms. With Multi-Domain products, you can add, remove or replace SANs within the purchased allowance without an extra SAN licence charge. Additional capacity requires extra licences, and new names require validation. Single-domain and standard wildcard certificates retain their original domain coverage. The primary domain remains unchanged. A validation-level change needs a suitable product. Once a reissue has been submitted to the CA, it cannot be cancelled.
Renewal: the next service period
With a renewal, you purchase the next service period. Check the dates and terms shown in your account and arrange the renewal early enough for validation and installation. Previous domain or organisation approval does not guarantee immediate approval of the next certificate.
What neither one does
A reissue does not extend your service end date. Neither a renewal nor a reissue includes installing the new files on your server. Revocation permanently invalidates a certificate and is separate from replacement and any refund request. You initiate replacements and renewals. There is no automatic installation.
Worked example
Certificate expiry and service expiry are different
Compare the expiry of the installed certificate with the end of your service in your account. The two dates mean different things and may be months apart.
- Certificate expires, service continues
- Request a reissue, complete any required validation and install the replacement.
- Service period is ending
- Arrange the next service period and allow time for validation and installation.
- Private key is compromised
- Generate a fresh key, request a replacement and contact our support team or the CA promptly about revocation.
- A new hostname is needed
- Only Multi-Domain products allow SAN additions or replacements. Stay within the purchased allowance and validate the new name. Extra capacity requires extra SAN licences.
Your next steps
- Check both the installed certificate expiry and your order service end date.
- Choose replacement or next service period, prepare a fresh key and complete the requested validation.
- Install the new certificate and intermediates on each TLS endpoint and verify the result.