Search code examples
securitysslssl-certificaterenewal

Is it possible to buy new SSL certificate and not renew the old one?

Is there a way how to buy a new certificate completely for the same domain from the same registrator (and third party company) even though they offering me renewal?

The reason I want to create a new certificate is that new certificate is much cheaper then renewal. Like -32% or more than renewal.

So is that possible?

Solution

  • In theory this is possible, although

    • Terms of service of this CA might forbid it or they might just declare a new certificate with the same credentials as renewing.
    • It says a lot how "valuable" the certificates are. In theory renewing should be cheaper because they don't need to verify the certificate owner as much as they did the first time. So this means probably that there "verification" of the owner isn't much worth.
    • If you use a different public key in the certificate (which they might require or would otherwise consider it renewing) there might be problems with certificate pinning or external certificate checks.