Re-keying is the process of generating a new private key for your existing SSL certificate. Your Web server uses the private key to decrypt secure information.

You should re-key your SSL certificate when:

• Your server crashes.
• You lose your private key.
• You move your website to a new server.
• You want to change your SSL certificate’s signature algorithm to SHA-2. For more information, see Information about Requiring the SHA-2 Hash Function
• You want to change your SSL certificate’s issuing organization. For more information, see Using the Right Issuing Organization for Your SSL.
• You change the encryption level of your SSL certificate. For more information, see Why do you require a 2048-bit key for my CSR?

Before You Begin

Before you can re-key your SSL certificate, you must generate a new certificate signing request (CSR) from your Web server. For instructions, see Generating a Certificate Signing Request.

The information in your new CSR must be identical to the information for your existing certificate. You cannot change the certificate details, such as the organization or domain name. If you need to change your certificate details, you must revoke the certificate in your account, purchase a new SSL credit, and complete the SSL request again.

NOTE: We automatically deactivate the previous certificate when we issue the new, re-keyed certificate. Do not revoke unless you are certain you want to cancel the existing certificate. When you revoke, the SSL credit is canceled and you cannot re-key the certificate.

To Re-Key Your SSL Certificate

1. Log in to your SSL Manager.
2. Go to the Manage Certificates tab.
3. In the Filters list, click Certificates.
4. Select the certificate(s) you want to re-key, and then click Re-Key.
5. If your domain name uses our shared hosting, and you want to switch to third-party hosting or one of our virtual private or dedicated servers: For What would you like to do?, select Un-install this certificate.

   NOTE: This operation removes your existing SSL certificate from your shared hosting account, causing temporary website downtime for up to 72 hours.

6. In the CSR field, paste your new CSR, including —-BEGIN NEW CERTIFICATE REQUEST—- and —-END CERTIFICATE REQUEST—-.
7. Select a Signature algorithm and a Certificate issuing organization, and then click Re-Key. We’ll send you an email message with instructions to validate and download your certificate.

We’ll remove the old certificate from our system within 72 hours. To ensure continuity of service, you must install the re-keyed certificate immediately. For instructions, see Installing an SSL: Server Instructions.