How do I reissue my SSL certificate? Print

How do I reissue my SSL certificate?

Reissuing your certificate is a standard maintenance task at Nixzoehost. It allows you to update your certificates technical link to your server without having to purchase a new one.

As of 2026, with certificate lifespans reduced to 200 days, you will likely find yourself using the reissue tool to "cycle" your security more frequently to keep up with industry standards.

Before You Start: The Required Piece

You cannot reissue a certificate using your old files. You must generate a brand new CSR (Certificate Signing Request) on your server first. This creates a fresh Private Key, which is essential for a successful reissue.

• If using cPanel: Go to SSL/TLS > CSR to generate a new code.

• Pro-Tip: Always save your new Private Key immediately!

Step-by-Step Reissuance Guide

1. Access the Nixzoehost Dashboard

Log in to your Nixzoehost Client Area and navigate to the SSL Certificates section.

2. Trigger the Reissue

Find the certificate you want to update. Click the arrow next to "Manage" and select Reissue Certificate.

• Note: If the button isn't visible, ensure your certificate is currently in an "Active" or "Issued" state.

3. Submit Your New CSR

A box will appear asking for your CSR.

• Paste the entire block of code from your new CSR (including the BEGIN and END lines).

• The system will automatically detect your domain and server type.

4. Confirm Validation Method

Even though you've validated this domain before, the Certificate Authority (CA) requires a fresh Domain Control Validation (DCV) for the new key.

• Choose Email, DNS (CNAME), or HTTP validation.

• Important: If you are reissuing because you changed your server IP, the HTTP method may fail until your DNS propagates. We recommend the DNS (CNAME) method for server moves.

5. Complete the Validation

Follow the instructions for your chosen method (e.g., clicking the link in your admin@ email or adding the CNAME record).

What Happens Next?

Once validated, the CA will issue a new set of certificate files (.crt).

1. Download the new files from your Nixzoehost dashboard or your email.

2. Install them on your server. Because you generated a new CSR, the server will "pair" the new certificate with the new Private Key.

3. Old Certificate: Your old certificate will remain valid for a short "grace period" (usually 72 hours) to give you time to complete the installation before it is revoked.

Reissuance FAQ

• Is it free? Yes. Reissuance is 100% free at Nixzoehost for the entire life of your certificate.

• Does it extend the date? No. A reissue replaces the file but keeps the original expiration date.

• Can I change my domain? You can change www.domain.com to domain.com (or vice-versa), but you cannot change the certificate to a completely different domain name (e.g., changing mysite.com to newsite.com).