---
title: "Renew a certificate"
slug: "certificatemanager-reissue"
updated: 2026-10-08T06:58:20Z
published: 2026-10-08T06:58:20Z
canonical: "guide.ncloud-docs.com/certificatemanager-reissue"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Renew a certificate

Available in Classic and VPC

You can renew an Enterprise Certificate before it expires.

- You can renew a certificate within the order's subscription period. Its validity period is extended to the maximum period available within the subscription period.
- You can use this feature if you lose your private key or need to change the domain names included in the certificate.

              Note

              

- The maximum validity period of certificates issued by public SSL/TLS certificate authorities (CAs), including certificates issued through Certificate Manager, must comply with CA/B Forum policies.
- To extend the period of use, you can issue a certificate through renewal. The maximum available period depends on the order's subscription period.

## Renewal target

Renewal is available only for **Enterprise Certificate**.

## Renewal conditions

- The status of the certificate you want to renew must be normal.
- The certificate you want to renew must have at least 1 day remaining before expiration.
- If a certificate in the same order has the status **In progress**, you cannot request another renewal.
- The issuance type of the certificate you want to renew must be original or representative.
  - **Original**: A certificate issued through **Issue certificate**. For the first renewal, select the original certificate to issue a renewed certificate.
  - **Representative**: The most recent certificate issued through **renewal** becomes the representative certificate. If an order contains a certificate with the issuance type **Representative**, select that certificate instead of the original certificate for renewal.

## Renewal types

There are 4 types of renewal. Depending on the renewal type, all existing certificates may be automatically revoked or additional charges may apply after renewal.

| Type | Description | Existing certificates | Charges incurred |
| --- | --- | --- | --- |
| Case 1. Keep the same domain names | Renew a certificate with the same domain names and number of domains as the existing certificate. After renewal, you can continue to use the existing certificate in the order. | Valid | None |
| Case 2. Add domain names only | Renew a certificate by adding domain names to the existing certificate. After renewal, you can continue to use the existing certificate in the order. Charges are applied proportionally based on the number of newly added domains and the remaining subscription period (years). | Valid | Charges are proportional to the number of added domains and the remaining subscription period (years). |
| Case 3. Delete domain names only | Renew a certificate by deleting some of the domain names included in the existing certificate. All existing certificates within the order are revoked 72 hours after renewal. | All existing certificates are revoked after 72 hours. | None |
| Case 4. Add and delete domain names | Renew a certificate by deleting some of the domain names included in the existing certificate and adding new domain names. All existing certificates within the order are revoked 72 hours after renewal. Charges are incurred depending on the number of newly added domains. | All existing certificates are revoked after 72 hours. | Charges are proportional to the number of added domains and the remaining subscription period (years). Charges are based on the number of domains. |

              Caution

              

Depending on the renewal type, all existing certificates may be automatically revoked 72 hours after renewal, or additional charges may apply. In Case 4, any domains newly added during renewal incur charges, even if the total number of domain names remains the same as in the existing certificate.

## Renew

1. In the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Certificate Manager** > **Enterprise Certificate** > **Order List**.
2. Select an order and a certificate you want to renew in the certificate list. The issuance type of the certificate you want to renew must be original or representative.
  - **Original**: A certificate issued through **Issue certificate**. For initial renewal, select the original certificate and renew it.
  - **Representative**: The most recent certificate issued through **renewal** becomes the representative certificate. If an order contains a certificate with the issuance type **Representative**, select that certificate instead of the original certificate for renewal.
3. After selecting the certificate, click **[Renew]**. When the Renew certificate page appears, follow the steps in order:
  - [1. Enter renewal information](/docs/en/certificatemanager-reissue#1%EA%B0%B1%EC%8B%A0%EC%A0%95%EB%B3%B4%EC%9E%85%EB%A0%A5)
  - [2. Enter CSR](/docs/en/certificatemanager-reissue#2CSR%EC%9E%85%EB%A0%A5)
  - [3. Domain control validation (DCV)](/docs/en/certificatemanager-reissue#3%EB%8F%84%EB%A9%94%EC%9D%B8%EC%A0%9C%EC%96%B4%EA%B2%80%EC%A6%9D)
  - [4. Review and request](/docs/en/certificatemanager-reissue#4%EA%B2%80%ED%86%A0%EB%B0%8F%EC%9A%94%EC%B2%AD)
  - [5. Complete the application](/docs/en/certificatemanager-reissue#5%EC%8B%A0%EC%B2%AD%EC%99%84%EB%A3%8C)

### 1. Enter renewal information

1. **Basic information**: Enter the certificate name.
2. **Domain name**: Enter the domain names. The domain names from the existing certificate are entered by default. You can keep, delete, or add domain names.
  - Supported domain name types
    - FQDN (e.g., www.example.com)
    - Apex domain (e.g., example.com)
    - Wildcard domain (e.g., *.example.com)

### 2. Enter CSR

1. Copy and paste a CSR in PEM format.
  - The CN field must have the same domain name as the **domain entered**.
  - For OV certificates, **organization validation information** must be entered correctly in the O, C, ST, and L fields.
2. Click **[Validate CSR]** to run validation. Validation must succeed to proceed to the next step.

### 3. Domain control validation (DCV)

Select how to validate the ownership of the domain you've applied for. Once you select a validation method at this stage, you cannot change after application.

- **DNS validation**: A method of validation if you have DNS editing permissions. For details, see [DNS validation](/docs/en/certificatemanager-domainvalid-dns).

### 4. Review and request

Review the certificate information you requested and the validation method.

- After the request is completed, validation values for DNS Record Type, Record Name, and Record Value are generated based on the selected DNS validation method. You can view the generated validation values and validation status in the certificate details in Certificate List.

### 5. Complete the application

After the application is complete, the certificate status appears as **In progress** in the Certificate List.

## Certificate renewal conditions

In the certificate details, domains that match those in the existing certificate have the validation status **Succeeded**. Once all domains are successfully validated, the certificate is renewed within minutes. If issued successfully, the certificate status appears as **Normal**, and information such as issuance date, authentication start date, and authentication end date in the certificate details is updated.

              Note

              

Validation status types include **In progress**, **Succeeded**, **Timeout**, and **Failed**.

### Validation status

You can view the validation status in **Certificate List** > **Certificate details**.

| Validation status | Description |
| --- | --- |
| **In progress** | Validation values have been generated using the domain ownership validation method selected in the certificate request, and validation results are pending. |
| **Succeeded** | Domain ownership validation has succeeded. |
| **Timeout** | More than 72 hours have passed in the **In progress** status. The domain ownership validation can no longer proceed after timeout. A new certificate issuance request is required. |
| **Failed** | Validation values could not be generated using the domain ownership validation method selected in the certificate request. This status can occur if an email cannot be sent for email validation or validation values cannot be generated for DNS validation. |

### Validation methods

- **For validation methods, see [DNS validation](/docs/en/certificatemanager-domainvalid-dns)**.
- After the certificate application is complete, Certificate Manager repeatedly checks for successful validation for 72 hours. If the validation for all domains you applied for succeeds, the validation status appears as **Succeeded** and the certificate is issued within minutes.
- If validation does not succeed within 72 hours, the certificate status changes to **Validation timeout**, and certificate issuance cannot proceed. If validation times out, apply for a new certificate.