Migrating a certificate on TBSCertBot
TBSCertBot can be used to manage an existing SSL certificate. Once imported into TBSCertBot, you can use the tool to reissue or renew your certificate.
Configuration file
TBSCertBot requires a configuration file to function. This file contains all the elements needed to manage a certificate: API username and password, certificate type, validity, organization, DCV method, etc.
Retrieve a configuration file from a certificate order
It is possible to generate a configuration file from a folder. This file will then be populated with the data of the chosen certificate.
Note: The download button is present on any certificate status page supported by the API.
You will be able to choose the server you want to use TBSCertBot on as well as an API user.
Once the file is downloaded and saved in the data/ directory of TBSCertBot, you simply need to add the password of the selected API user.
Importing a certificate into TBSCertBot
To import a certificate into TBSCertBot, use the following command:
$ php tbscertbot.php import [TBSREF]
At the end of the import, you will need to specify where the certificate's private key is located.
If multiple valid certificates are available, the following will be displayed:
$ php tbscertbot.php import 1234567890
Making server call to get order 1234567890
Fetch successful
SerialNumber of last certificate issued: 0183268F7CE81130C4D84D7B895AC3BD
3 valid certificates has been found
Do you want import a specific one (if n the lastest issued will be import)?
[y/N]y
1 - 0DF9725C154B68F7AD7ECEE3267C1D28
Start: 2024-06-20 End : 2024-06-22
2 - 0183268F7CE81130C4D84D7B895AC3BD
Start: 2024-06-20 End : 2024-06-22
3 - 0183268F7CE81130C4D84D7B895AC3BD
Start: 2024-06-20 End : 2024-06-22
Select the certificate to import (leave empty to import the last certificate
delivered):
You can select the certificate specifically intended for this server.
Renew / reissue the certificate
Once the certificate is imported, you can use TBSCertBot to request its renewal:
$ php tbscertbot.php renew 1234567890
or its reissue:
$ php tbscertbot.php reissue 1234567890