Search... ⌘ K
Get Started Contact Sales

How to Renew a Sectigo SSL Certificate

Last updated

Table of Contents

Note

There are a few important things you should note about renewing an SSL certificate before continuing with this document.

Seven days before the certificate expires, you will begin receiving renewal notices. Certificates purchased before March 15, 2026 use the previous 60-day notice window.

Note

Starting March 15, 2026, Sectigo certificates are valid for a maximum of 200 days due to CA/Browser Forum lifetime reduction requirements. You will need to purchase a new certificate before it expires to maintain uninterrupted coverage.

Start the renewal as soon as appears in the menu, so that email validation and issuance have time to complete before the current certificate expires. If you want a longer lead time, you can purchase a new certificate at any point instead of waiting for the renewal window.

Renewing your Sectigo certificate

Renewing a certificate
  1. Log into DNSimple with your user credentials.
  2. If you have more than one account, select the relevant one.
  3. On the header, click the tab, locate the relevant domain, and click on the name to access the domain page.

  4. Click . Click the menu at the end of the certificate’s row, then select .

    A domain's SSL Certificates list with a certificate's ... menu open and an arrow pointing at Renew

    only appears in the menu once the certificate is close to expiring. For Sectigo certificates, it becomes available 7 days before the expiration date and remains available for 7 days after. Certificates purchased before March 15, 2026 use the previous 60-day window.

    If is missing from the menu outside that period, the certificate is either not yet due for renewal, already expired for more than 7 days, or in a state that does not allow a renewal.

  5. On the page, check that the heading shows the certificate you want to renew. The renewal keeps the same common name.

    1. Under , leave selected, or choose if your server requires RSA. Choose only if you need a custom CSR. We recommend letting DNSimple generate a new private key.
    2. Click . If you do not have a subscription, you pay for the renewal at checkout.

    The Renew certificate page for a Sectigo certificate, with the Private key options and a Renew certificate button

Note

The certificate renewal price will be held on your card immediately. Your card will be charged once the new certificate is issued. If the issuance fails, funds will be released.

Next Steps

Once you order the certificate, you will have to go through the steps of configuring, verifying, and installing the certificate to receive the certificate.

For the validation step, see SSL Certificate Email-Based Domain Validation, and for the full process, see Getting Started with SSL Certificates.

Have more questions?

If you have any questions or need assistance, contact support, and we will be happy to help. You can also read more about SSL certificates at DNSimple.