Renew or remove a certificate

Coritan renews free certificates on its own once they have 30 days or less left (How SSL/TLS certificates work). Renew one yourself when it is close to expiry and has not renewed, or when you want a new one early. Remove a certificate to stop Coritan serving it.

• The certificate must be active. The Renewal card, with Renew now and Remove certificate…, appears only for an active certificate.
• A renewal validates the same way the certificate was first validated. For Coritan DNS the zone must still be at Coritan, and for HTTP validation the name must still point at Coritan's network.
• A certificate you uploaded has no Renew now. Upload a newer one instead (Upload your own certificate).
• When a wildcard covers the hostname, the tab shows the wildcard, and renewing or removing it acts on the wildcard for every name it covers.

1. In the dashboard, go to Domain Management, open the domain and select the SSL/TLS tab.
2. When the domain has more than one hostname on Coritan's network, choose one in Settings for.
3. On the Renewal card, select Renew now.

For a web proxy whose name is not under a domain on your Domain Management list, go to Game Shield, open the web proxy in the Web proxies tab and select Renew now on the Certificate card of the Overview tab.

1. In the dashboard, go to Domain Management, open the domain and select the SSL/TLS tab.
2. When the domain has more than one hostname on Coritan's network, choose one in Settings for.
3. On the Renewal card, open the More certificate actions menu and select Remove certificate….
4. Type the certificate's name to confirm, such as example.com, or *.example.com for a wildcard.
5. Select Remove certificate.

After Renew now, the dashboard confirms Renewal of the certificate for example.com started., naming the wildcard when it is one. Once the certificate authority issues the new certificate, the Expires row moves forward, Last renewal shows the date, and the web proxy serves the new certificate.

After you remove a certificate, the dashboard confirms Certificate for example.com removed. and the Certificate card marks it Removed and reads Our network no longer serves this certificate. Request a new one below. Coritan stops serving it, but it does not ask the certificate authority to revoke it. To serve HTTPS again, use the Request a certificate card that appears on the same tab (Issue an SSL/TLS certificate), or upload a certificate of your own.

The certificate shows failed after a renewal

The renewal did not validate. The previous certificate stays in use until its Expires date. Read the reason under The last request failed, fix it, and issue a new certificate before that date.

A certificate validated with a manual TXT record did not renew

Each renewal needs a new TXT value, which Coritan cannot add at another DNS provider, so the renewal fails and the certificate shows failed. Run the manual DNS validation again before the Expires date. To stop this happening, move the domain's DNS to Coritan or use HTTP validation.

A certificate is close to its Expires date and has not renewed

Select Renew now. If the renewal fails, the Certificate card gives the reason.

No active certificate found for this domain

Only an active certificate can be renewed. Issue a new certificate instead.

No active certificate found

The certificate was removed already, or it is not active. Reload the page to see its status.

Renewal already in progress

Coritan is already renewing the certificate. Wait for the Certificate card to update.

• How SSL/TLS certificates work
• Issue an SSL/TLS certificate
• Upload your own certificate

Renew an active certificate by its name, which for a wildcard is the wildcard itself, such as *.example.com. The answer is 202:

curl -X POST https://api.coritan.com/api/v1/ssl/certificates/example.com/renew \
  -H "Authorization: Bearer $CORITAN_TOKEN"

{
  "message": "Certificate renewal queued",
  "job_id": 5814,
  "domain": "example.com"
}

For a certificate you uploaded, the same call orders a free certificate for its name in its place.

Remove it. The answer is 200 with {"message": "Certificate revoked", "domain": "example.com"}, or 404 with No active certificate found when the name has no active certificate. The certificate's status becomes revoked:

curl -X DELETE https://api.coritan.com/api/v1/ssl/certificates/example.com \
  -H "Authorization: Bearer $CORITAN_TOKEN"

To serve HTTPS again, order a new certificate with POST /api/v1/ssl/certificates (Issue an SSL/TLS certificate).