How to Renew an SSL Certificate
-
Renewing an SSL certificate follows almost the same process as placing a new order — you will need to submit a CSR, go through the validation, and reinstall the new certificate on your server. Renewal always means new validation; even if your organization details have not changed, the CA must verify your domain (and company, for OV/EV) again before issuing the renewed certificate.
When to Start the Renewal
You can begin the renewal process no earlier than 30 days before your certificate's expiration date. If you renew outside this window, any remaining days on your current certificate will be lost; they will not carry over to the new one.
When you renew within the 30-day window, all remaining days from your existing certificate are automatically added to the new one, up to a maximum of 30 days.
⚠ Note: OV and EV certificates require company verification, which can take 1 to 7 business days. We recommend starting the renewal process at least 15 days before expiration to allow enough time for validation to complete without any coverage gap.
Step-by-Step: Renewing Your SSL Certificate
- Log in to the GoGetSSL Management Platform: my.gogetssl.com
- Go to the My Prices section.
- Select the product you want to renew and click the Order button.
- Select the certificate period and any additional features.
- Complete the payment process.
- Go to the SSL Certificates section and click the Generate Certificate button.
- When submitting your CSR, select RENEW from the options menu. This links your new certificate to the previous one and transfers any remaining days (up to 30) to the new certificate's validity period.
✔ Tip: You may reuse your existing CSR and private key for renewal, or generate a new CSR. Generating a new CSR also produces a new private key, which is considered best practice for security.
Code Signing and S/MIME Certificates
Code Signing and S/MIME certificates do not have a renewal option. For both product types, you must place a completely new order and go through the full issuance process from the start. This is a CA-level requirement, not a GoGetSSL policy.
Renewing an SSL Certificate Purchased Elsewhere
You can renew an SSL certificate with GoGetSSL even if the original certificate was purchased from a different provider. The same 30-day rule applies; you can start the renewal process no earlier than 30 days before your current certificate's expiration date.
Remaining days from the original certificate will be carried over for certificates issued under the DigiCert and Sectigo CA families, including all brands under DigiCert, such as GeoTrust, RapidSSL, and Thawte, as well as GoGetSSL certificates.
⚠ Note: If your current certificate was issued by a CA outside of the DigiCert or Sectigo families, remaining days may not be transferable. Contact our support team before placing the renewal order to confirm.