A reissue replaces your certificate with a new one on the same order, at no extra cost and as many times as you need during the certificate's life. Use it when the key, the server or the domains change.
When to reissue
- Your private key was lost or compromised. Reissue with a new key immediately, then ask us to revoke the old certificate.
- You need to change the CSR or move to a stronger key (for example from RSA to ECC).
- You need to correct or swap domains on a multi-domain (SAN) certificate. Adding domains beyond your plan's allowance is charged per domain.
- You're migrating servers and want a clean certificate and key on the new machine.
How to reissue
From the certificate's detail page in your account, start a reissue, submit your new CSR, and complete domain validation again if the CA asks. The CA issues a replacement certificate; install it in place of the old one.
Reissue vs renew vs reactivate
- Reissue: free, same order, changes the key, server or domains.
- Reactivate: the free next certificate inside any plan of a year or more.
- Renew: a new purchase when your plan ends; see how to renew.
Common questions
Should I revoke the old certificate?
Yes, if the private key was lost or exposed. Ask us in a support ticket once the replacement is installed.
Does a reissue restart the money-back window?
No. Refund eligibility follows the original purchase; see the refund policy.
Do I have to validate the domain again?
Only if the CA asks. A domain check can be reused for a limited time (200 days today); after that it's repeated.