Reissuance

Through reissuance you can get a new certificate in replacement of an existing one and created from the same fields but with a different pair of keys.

This procedure is used in case of:

• loss of the certificate due to a hard disk problem
• A software switching
• The modification of the key sizes
• The vulnerability of the private key (OpenSSL-Debian incident)
• changing a SHA1 signature to SHA256
• SAN additional (if available on the product)
• loss of the private key

All Certification Authorities do not apply the same rules. Some of them allow free lifetime reissuance when other allow it only for 30 days. Some allow the modification of the CN (if the domain remains the same) or the modification of the OU field and some do not allow any modification.

authorities allowing a CN modification via reissuance

• Sectigo (for its UC certificate only)

How to reissue a certificate?

To request a reissue, go to the status page of your file and click on the "Request certificate reissue" button (it does not appear if free reissue is not possible). To generate a new private key and CSR, please refer to your software documentation or consult our FAQ: Get a certificate

Useful links

• Manual reissuance of a CSR for MS Authenticode (or VBA)
• Delivery time for a reissuance
• List of software that allows the reuse of CSR

• Reissue a certificate with Microsoft IIS 5 or 6