Issue Certificate

1. Log in to your Atlas portal.
2. Click Certificates on the left nav, and then click Request Certificates.
3. On the next window, select the Product you wish to issue a certificate from.
4. Select the Identity Profile that will populate the Subject details of your certificate. You may also request a new Identity Profile from this screen.
5. Copy and paste your Certificate Signing Request (CSR), then click the Check this CSR button to validate the CSR. Note that the CSR must match the signature algorithm of your selected product type.
6. The certificate common name and any SANs will automatically populate the next two fields. You're welcome to make edits to these fields at this point.
   
   Note that you must have verified control over the requested domains before requesting a certificate.
   
   You can add SANs according to the maximum number of SANs as specified by your purchased product; e.g., if you have 5 maximum SANs in your product pack, you can add up to 4 additional SANs to your certificate. 1 SAN will be taken as the Certificate Common Name.
7. Under the Hash Algorithm section, you may be allowed to select the desired hash algorithm for your Certificate, according to your product type.
8. The default maximum validity period is set according to your product type. You can choose a lesser validity period in the Expiration Date section.
9. Tick the I have read and agree to the Subscriber Agreement checkbox. This is mandatory to proceed with the certificate request.
10.  Click the Request this Certificate button to complete the request.
11. Your certificate request has been submitted. It may take a few moments for the certificate to display in your Issued Certificate inventory.

Reissue Certificate

Reissuing a certificate is the process of requesting a copy of an existing certificate that will last for the duration of the original certificate. The process requires submitting a new CSR signed with a new public/private key pair from the original certificate. The resulting certificate will have a public key type and length informed by the CSR, an expiration date that is the same as the original certificate (or abides by current industry standards), and subjectDN fields that match your Atlas identity profile.

This feature is available for certificates that have been issued through the GlobalSign Atlas portal, Atlas APIs, or ACME.

Certificates that are reissued will not count against your service quota.

1. Click Certificates on the left nav and then click Issuance Inventory.
2. Select the certificate you wish to reissue and then click the Reissue action button on the right side of the window.
3. Enter a valid CSR for the new certificate. This CSR should be signed with a new public/private key pair than from the original certificate. Click Confirm when ready.
4. Validation of the CSR will commence at this step. If all checks pass, the newly reissued certificate will appear on the top of your Issuance Inventory.       
   
   ​​Note that the original certificate will remain in the issuance inventory until you revoke the certificate or it naturally expires.

Renew Certificate

Renewing a certificate is the process of requesting a new certificate that retains some of the same information as the original certificate. The process requires submitting a new CSR signed with a new public/private key pair from the original certificate. The resulting certificate will have a public key type and length informed by the CSR, an expiration date equivalent to the maximum allowed by your product, and subjectDN fields that match your Atlas identity profile.

1. Click Certificates on the left nav and then click Issuance Inventory.

2. Select the certificate you wish to renew and then click the Renew action button on the right side of the window.

3. Enter a valid CSR for the new certificate. This CSR should be signed with a new public/private key pair than from the original certificate. Click Check this CSR.

4. Validation of the CSR will commence at this step. Check the other details on this screen for accuracy. Depending on the product type, you may be able to make some modifications to the certificate request.

5. Tick the I have read and agree to the Subscriber Agreement checkbox. This is mandatory to proceed with the certificate request.

6. Click the Request this Certificate button to complete the request.

7. Your certificate request has been submitted. It may take a few moments for the certificate to display in your Issued Certificate inventory.

Revoke Certificate

Revoking a certificate distrusts the certificate and any endpoints that have it installed. This is an irreversible action and should only be done when the certificate has been successfully replaced.

1. Log in to your Atlas portal.
2. Click Certificates on the left nav and then click Issuance Inventory.
3. Select the certificate you wish to revoke and then click the Revoke action button on the right side of the window.
4. Select the revocation reason, and then click Revoke.
5. Your certificate has been revoked. If you have a SAN license, any SANs attributed to this certificate will be returned to your license pool.

Frequently Asked Questions

How soon can I renew a certificate? 

Certificate can be renewed within 30 days before the expiry date or 7 days after the expiry date. 

Can I change the issuing product and identity profile during a certificate renewal?  

Yes, if you have multiple product types or identity profiles, you can change the issuing product and the identity profile in your certificate request. However, this might result in you losing some of the options you had available in the original certificate (e.g. SAN count).  

Do I have to use the same CSR I used for an existing certificate when renewing or reissuing a certificate?  

No, you don’t have to, and you're encouraged not to. The CSR must be compatible with your selected product type. 

Can I change the common name and SANs when renewing a certificate? 

Yes, while the certificate request form will be pre-filled with the common name and SANs from the original certificate, you may change them prior to finalizing your new certificate request. 

Can I change the validity period of a new certificate?  

Yes, as long as it is within the maximum allowed validity of the issuing product.  

Do I have to agree to the subscriber agreement when I renew a certificate?  

Yes, as this is a new certificate, you will need to agree to the subscriber agreement before you can renew a certificate.  

The Renew button isn't available for my certificate, what do I do? 

If the Renew action button is not displayed, the certificate is not available for renewal (outside of the renewal window) or has expired or been revoked.