Why would I need to reissue my certificate? Print

At Nixzoehost, we often get asked if a certificate is "permanent" once it's installed. While your SSL has a set expiration date, there are several situations where the "link" between your server and the certificate needs to be refreshed.

Reissuance is the process of generating a brand-new certificate file to replace your existing one. At Nixzoehost, this service is free and unlimited for the duration of your certificate's life.

Common Reasons for Reissuance

1. You Lost Your Private Key

This is the #1 reason for a reissue. If you accidentally deleted your Private Key from cPanel, or if you moved to a new host and didn't bring the key with you, your SSL is "broken." Since Nixzoehost does not store your Private Key for security reasons, the only way to fix this is to generate a new CSR/Private Key pair and reissue the certificate.

2. You Moved to a New Server

If you are migrating your website from a different provider to Nixzoehost (or moving from our Shared hosting to a VPS/Dedicated server), your new server needs its own unique "handshake." It is always best practice to reissue your SSL when changing server environments to ensure the encryption is optimized for the new hardware.

3. You Need to Change the Domain Details

• Adding/Removing SANs: If you have a Multi-Domain (SAN) SSL and you want to add a new domain (e.g., adding shop.mysite.com to your existing certificate), you must reissue to include the new name.

• Common Name Changes: If you are changing your primary domain from mysite.com to my-new-brand.com, a reissue is required.

4. Security Concerns (Compromised Key)

If you suspect that someone has gained unauthorized access to your server or your Private Key, your encryption is no longer "private." You should immediately generate a new CSR and reissue the certificate to "lock out" anyone holding the old key.

5. Upgrading Encryption Standards

With the 2026 security updates, many users are reissuing their older RSA certificates to switch to ECC (Elliptic Curve Cryptography) for better mobile performance and faster loading speeds.

What Reissuance Does NOT Do

• It does not extend your expiration date: If your certificate expires in 3 months, reissuing it today will not give you a fresh year of service. It simply replaces the current file with a new one that still expires in 3 months.

• It is not an "Automatic Fix" for errors: If your site has "Mixed Content" errors (images loading over HTTP), reissuing the certificate won't fix it. Youll need to fix those links within your website code.

The Reissuance Checklist

Before you hit that reissue button in your Nixzoehost Dashboard, make sure you have:

1. Generated a new CSR on your server.

2. Verified you have access to the Validation Method (Email, DNS, or HTTP).

3. Backed up your current site files just in case.