Detailed explanation of issues related to SSL certificate renewal

from 2021 year 9 month 1 The first day Apple Safari, Google Chrome, firefox Firefox etc. , And well-known in the industry CA Certification bodies begin to implement “ Issue a one-year validity certificate ” The new policy of . Shortening the certificate validity period will increase the risk of certificate expiration , If the fee is not renewed in time upon expiration , It will make it impossible to continue to use SSL Certificate Services , This may lead to a decline in the security of your website , Bring you losses ！

1. SSL When is it appropriate to renew the certificate before it expires ？

answer ： at present SSL Before the certificate expires 90 It can be renewed within days , It is suggested that it is better to 30 Renew within days , First, sufficient time should be reserved to deal with unexpected situations that may occur during the renewal period , The second is to reserve enough time to replace certificates , Ensure that the new certificate can be replaced in time , Avoid risks on the website , Suffer losses .

2. Early renewal SSL certificate , Will the remaining validity period of the certificate continue ？

answer ： Ordered at the Watson digital certificate store Digicert[1] Under the brand SSL certificate , The remaining validity period of early renewal will be automatically added to the validity period of the newly issued certificate ;Sectigo brand SSL Certificate renewal in advance will be free of charge 3 The term of validity is .

3. SSL Can I renew my certificate directly after it expires , Can I avoid certificate replacement ？

answer ： You can't .SSL After the certificate expires , Need to reapply SSL certificate 、 Submit certificate application for review 、 And wait for the certificate to be reissued and redeployed to your Web Server , Then overwrite the previous certificate with the same name .

4. SSL What will happen if the certificate expires and is not renewed in time ？

answer ： If SSL Certificate expired and not updated in time , When the user visits the website, it will display “ The security certificate for the website has expired ” Warning message . Users may want to avoid personal losses , And choose to stop visiting the site .

in addition , Some outlaws can take advantage of expired SSL certificate , Tamper with or steal the information and data transmitted between the browser and the server , Thus affecting the data security of users .

5. Where to renew SSL certificate ？

answer ： Whether or not you apply for the certificate at the Watson digital certificate store for the first time SSL certificate , You can renew your SSL certificate . At present, you can renew the following brands in the watcom digital certificate store SSL certificate ：

Sectigo,CFCA,Digicert,Comodo,GlobalSign,Wotrus National secret SSL certificate [2] Dozens of digital certificate brands .

If you need more information , You can contact our online customer service or directly contact the customer manager .

6. SSL How to renew the certificate ？

answer ： You can visit wotong CA Official website （http://wosign.com), Contact the online customer service personnel to help you renew the fee , You can also complete the renewal through self-service purchase . If you have any questions during the renewal process, please check our online help document , Or contact the customer service personnel for assistance .

Reference resources

1. ^Digicert The certificate application  Symantec_GlobalSign_Comodo_ssl Certificate fee and DigiCert_ssl How much is the price of the certificate -SSL Digital certificate price list !
2. ^ National secret SSL certificate   National secret SM2_ National secret https Encryption certificate _SSL Certificate full ecological support and global trust solutions