How to Change SSL Certificate Providers

Something we get asked a lot is how one would go about changing SSL providers or certificate authorities (CAs). We get it — SSL replacement seems like a pretty challenging task, but it’s really not.

Basically, you just replace the SSL certificate you were using with one from the new certificate authority you’ve chosen. People change CAs all the time. In fact, that’s one of the most common things we help businesses and website with. There are all kinds of reasons to switch CAs.

• Pricing
• Product selection
• Customer service
• Lack of faith in the CA
• CA distrust issues

So, How DO You Change SSL Certificate Providers?

Fortunately, changing isn’t difficult. You go through the process just like you normally would:

• Purchase a new SSL certificate from your CA of choice,
• Generate a certificate signing request (CSR) on your server,
• Send the CSR to your chosen CA,
• Undergo validation, and
• Install the new certificate on your server once it’s been issued.

Bear in mind that you’ll need to furnish validation information with your new CA and undergo the process again. CAs can reuse validation information for up to 27 months. However, because CAs don’t share information, you’ll need to allow time for validation to complete.

There are also considerations if you’re using automation. This is especially the case if you’re using an automated certificate management environment (ACME) or a third-party certificate management solution. You’ll need to go into your configurations and have your server start making calls to your new CA. The way to do this varies by platform, but in general you want to make sure you’re not still getting certificate issued by the old CA.

What Else Should I Worry About When Changing SSL Certificate Providers?

You may also want to consider updating your certificate authority authorization (CAA) records to block the CA you’ve left from issuing any more certificates for your domains.

If you decide to change ssl certificate providers, the important thing is not to overthink it. SSL certificates were designed to be swapped out regularly — regardless where you get them from.

If you’re interested in switching, take a look at a curated selection of our most popular products. We guarantee our prices are the lowest you’ll find anywhere on the internet. If you do find a lower price, show us and we’ll match or beat it — depending on how generous we’re feeling that day.