This article provides instructions on how to renew a non-expired SSL certificate in the Purdue instance of the CERTInext/InCommon Certificate Manager

OVERVIEW

This article provides instructions on how to renew a non-expired SSL certificate in the Purdue instance of the CERTInext/InCommon Certificate Manager

REQUIREMENTS

• Technician must have access to:
  • CERTInext/InCommon Certificate Manager with Elevated Privileges
• The Fully Qualified Domain Name(FQDN) of the site who's non-expired SSL certificate is to be renewed
• Certificate Signing Request(CSR) for the site to be renewed provided by the requester
• Contact email for the department responsible for the certificate
  NOTE: To avoid lost communication or disruption to business processes, we strongly encourage that the contact information provided is a mailing list for the team responsible for these certificates rather than one or two individual email addresses.

PROCEDURE

Renew SSL Certificate

1. Log Into CERTInext Platform:
   1. See Article "Signing Into CERTInext (InCommon Certificate Manager)" for instructions for logging into the CERTInext platform
2. Click the "CERTIFICATES" dropdown menu on the left hand side of the dashboard
3. Click the "ORDERS" item under the "CERTIFICATES" dropdown menu
4. Locate the existing certificate for the FQDN that needs to be renewed
5. Click the "RENEW" button next to the certificate
6. Choose the type of SSL certificate that is appropriate for the domain: Single Domain, Wildcard(*) subdomain, or Multi-Domain
7. Add the CSR provided by the requester to the renewal request
8. Confirm that the renewed certificate has populated on the "Orders" screen under the table of certificates
9. Resolve the ticket & inform the requester that the certificate has been renewed

GLOSSARY

• CSR: Certificate Signing Request
• FQDN: Fully Qualified Domain Name

RESOURCES

• https://us.certinext.io/
• https://emudhra.com/en/blog/ssl-certificate-renewal-guide-ssl-certificates-before-expiry