Skip to main content

Renew a Certificate

Renew a Certificate before it expires, so the Custom Domains that use it keep serving HTTPS. The new Certificate applies at once to every Custom Domain that uses it.

Steps 1–2Click ⋮ → Import to renew on the row of the Certificate you want to renew
1 / 2
Steps 1–2: Click ⋮ → Import to renew on the row of the Certificate you want to renew

Click the image to zoom in.

Renew a Certificate​

To renew a Certificate, follow these steps:

  1. In the left menu, select API Gateway → Certificate.

  2. On the row of the Certificate you want to renew, click ⋮ → Import to renew.

  3. Enter the following information in the Import Certificate to Renew form (Name is filled in and read-only):

FieldRequiredDescription
Certificate contentYThe new Certificate in PEM format. Paste it, or click Upload to load a .pem or .crt file.
Certificate private keyYThe private key of the new Certificate. Paste it, or click Upload to load a .pem or .key file.

Import Certificate to Renew form

  1. Click Import & Renew.

The message Imported successfully. appears. The Expiry, Last Renewed At, and Last Renewed By of the Certificate are updated. The status of the Custom Domains that use the Certificate is recalculated on the Gateway Endpoint tab, for example from Cert expired to Cert valid.

If the renewal fails, the Custom Domains keep using the old Certificate.

warning
  • You can renew only a Certificate that at least one Custom Domain uses. For an unused Certificate, Import to renew is disabled with the tooltip Certificate is not used by any gateway instance. In that case, import a new Certificate.
  • The new Certificate must be valid and include every Custom Domain that uses the old Certificate.

Import to renew disabled for a Certificate that is not used

Common issues​

ErrorCauseSolution
The certificate is not yet valid.The new Certificate is not valid yetRenew on or after the Valid From date of the new Certificate.
This certificate has already been imported.The new Certificate is the same as the current oneUse the new Certificate issued for this renewal.
Key provided does not match the certificate.The private key belongs to another CertificateUse the private key of the new Certificate.
PEM format errors, or the Certificate has expired or was revokedSame as when you import a CertificateSee Import a Certificate.

Next steps​

Last updated on