asked on

Tricky certification request procedure help

Hi,

I have a customer in which they need to renew certificates in iis.

This time they want me to do the request.

So, what is the relevant procedure for this? Since it is a renewal, should i asked which cert authority they have used? Or can i create the request without that information?

Br.

Will Szymkowski

You can identify all of the certificate info directly within the Certificate itself. Are you planning on re-generating a new CSR? If you are typically you need to do this directly from the server where the cert will be used. Other Certs like SAN/UCC certs you can create the CSR on one server and then when you complete the CSR request you can export the private key which will allow you to import the cert on another machine.

Will.

jazzIIIlove

ASKER

But is it important to know the certification auth to do this?
Can/Should i extract any information from the existing certs? Or is it not relevant?

This is just for SSL btw.

Br.

Will Szymkowski

If you are actually doing a Renewal then you need to use the same 3rd party SSL provider that originally assigned the certificate. If this is not a true renewal and you have to re-generate a new CSR then you do not need to use the same SSL provider.

Will.

jazzIIIlove

ASKER

"If you are actually doing a Renewal then you need to use the same 3rd party SSL provider that originally assigned the certificate."

Thanks. Is it possible to extract this information from the current certificates?

Br.

ASKER CERTIFIED SOLUTION

Will Szymkowski

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jazzIIIlove

ASKER

Thanks. A final question, once i see the authority, should i follow the instructions for Renewal? And if the instructions are missing, is there any generic renewal request for windows that i should follow?

And as a bottom line, this renewal request is actually not different than an initial request?

Will Szymkowski

For a renewal request without creating a new CSR you will need to contact the 3rd Party SSL provider directly and this is done on there send.

In the event that they need the CSR this is basically stated the entrie process over again.

Will.