You may need to reissue your SSL certificate when you move your website to a new server, lose your private key, make domain or SAN changes, or need a new certificate configuration.
BuySSL.lk provides free and unlimited SSL certificate reissues for eligible certificates.
Note: A certificate can only be reissued when its status is Active or Issued. A reissue cannot be submitted while another reissue request is being processed.
Common Reasons to Reissue an SSL Certificate
You may need to reissue your SSL certificate when:
- You have lost the private key.
- You have moved your website to a new server.
- You get a "modulus mismatch" error during installation.
- You need to change the main domain.
- You need to add or update SANs on a Multi-Domain SSL certificate.
- A reissue is required due to Certificate Authority security or compliance requirements.
How to Reissue Your SSL Certificate
Step 1: Open Your SSL Product
Log in to your BuySSL.lk Client Area and open the SSL certificate you want to reissue.
Click Configure Now to continue.
Step 2: Generate a New CSR
Generate a new CSR (Certificate Signing Request) from your server and copy it into the required field in the Client Area.
You can also use the Generate CSR option in the Client Area to create a CSR and key.
Step 3: Complete the Required Details
Enter the required administrative contact information and continue to the next step.
Step 4: Complete Domain Validation
Select one of the available domain validation methods:
1. Email Validation
Choose an approved email address for your domain, such as:
admin@yourdomain.com
administrator@yourdomain.com
An approval email will be sent to the selected address. Open the email and click the approval link.
2. DNS Validation
Add the CNAME record provided by the Certificate Authority to your domain's DNS zone. The CA will automatically check the record and validate the domain.
3. HTTP File Validation
Upload the validation file provided by the Certificate Authority to the specified location on your web server. The CA will then check the file to complete validation.
Step 5: Download Your Reissued Certificate
Once domain validation is completed successfully, your SSL certificate will be reissued.
You can download the certificate from your Client Area, and in supported cases, it will also be sent to your email.
Important Reissue Notes
- Using the original CSR may allow the certificate to be reissued without repeating domain validation, depending on the certificate and reissue conditions.
- If you change the main domain, submit a new CSR with the new domain. The previous certificate may be revoked as part of this process.
- For Multi-Domain SSL certificates, SANs can be updated during the reissue process.
- Make sure the new private key is kept safe and is available when installing the reissued certificate.
Need Help?
If you have any issues during the SSL reissue process, please contact the BuySSL.lk support team for assistance.