No certificate can last a full year any more, so an SSL plan of a year or more is delivered as a series of certificates. Before each one expires you reactivate it free and get the next, until your paid term ends.
Why validity is capped
CA/Browser Forum ballot SC-081 limits how long a single certificate can be valid. A certificate can now last up to 200 days now; up to 100 days from 15 Mar 2027; up to 47 days from 15 Mar 2029. These limits apply to every CA and every seller; your plan spreads your paid term across them with free reactivations.
How the plan works
- You buy a plan of a year or more (the longest term depends on the product), and a certificate valid for up to 200 days is issued now.
- Before it expires, you reactivate: a free reissue that gives you the next certificate.
- This repeats until the full term is used. You pay once for the whole plan.
The reactivation window
You reactivate in the 30 days before each expiry. We send reminders at 30, 14 and 3 days, and your dashboard shows a countdown to the next reactivation.
What happens if it lapses
If a certificate expires before you reactivate, the plan pauses: HTTPS stops until you reactivate. Your plan's end date doesn't move, so days spent paused count against your plan. Reactivate inside the 30-day window to use every day you paid for.
How to reactivate with us
From your dashboard, click Reactivate on the certificate. Submit a CSR (a new one is recommended) and complete domain validation if the CA asks, and the next certificate is issued under your existing plan at no charge. Then install it.
Common questions
How often will I reactivate?
At least once a year today, because a certificate lasts at most 200 days. From 15 Mar 2027 the limit is 100 days, so more often. Your dashboard shows the next date.
Does reactivation cost anything?
No. It's included in your plan.
Do I need to validate my domain each time?
Only when the previous domain check is older than the reuse limit (200 days today). Leaving your DNS validation record in place makes it quick.