Link to home
Start Free TrialLog in
Avatar of Virene
Virene

asked on

Clone SSL Cert Using New CSR

Greetings,

I have been looking for a way to clone an existing wildcard certificate using a new CSR. It can be done - see https://www.digicert.com/ssl-support/duplicate-ssl-certificates.htm

I have reviewed OpenSSL and "googled" but have not come up with an answer. Note that this is not a reissue - the cert properties are retained.

Thanks,
Rick
Avatar of davorin
davorin
Flag of Slovenia image

Why would you want to do that?
Don't you have original certificate and private key combination? Or the option to export existing current certificate from where it is installed?
I guess you have created self signed certificate with openssl and I doubt you have created CRL. So even if you create a new certificate the first one will not be revoked.
I'm not that familiar with openssl, but I doubt that it has duplicate certificate option.
I think that some public CA stores (like digicert) have "certificate duplicate" options, but probably some are calling them "free reissue"
Clone or duplication of wildcard SSL certificate is permitted based on the tool that has been provided by the CA. As on your link that you provided, the CA is Digicert which they have set their issuer CA to allow that to happen. If your wildcard is public issued CA cert, then you might want to contact your vendor to see if they provide that function inside their portal.
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.