Correct.

In order to upload any new certificate docs you must first remove the existing ones.

As I recall, you’ll need to re-upload all parts - you cannot just update one of the files. If some are the same just reupload the same ones.

@Daniel Your site is insecure only for the period until the new certificate is uploaded. Hopefully you can get the full task completed in about 10-15 minutes. If you have to work with your IT department to get your new SSL, I recommend that you give them a ‘heads up’ so they can process the request quickly.

@gstager @KMallette Thanks for the replies. Our certificate provider is asking for a CSR file before they can issue our new certificate. I have a CSR file from last year, so I’m wondering if it would be possible to send them this file instead of removing our current certificate in order to generate the new CSR file. Do you know if this is possible? If not, I would seem to be in a Catch 22 situation where I have to remove the old certificate and unsecure the site before I can apply for a new one.

@DanielNo, you need to send them a new one because part of the data in the encoded CSR is a date.

Don’t worry too much about the site being unsecured. If the SSL has expired, then the site is already unsecured.  Start your renewal process early in the day, and you’ll be done by noon.

Hi @Daniel 

I went through the same terror when renewing our certificates the first time!

If it helps alleviate the anxiety, your site is still secure even after you remove the old certificate.  The old certificate actually remains in place and valid until it’s original expiry date.  You can check this through the browser by 1) clicking the padlock in the URL bar; 2) clicking “Certificate is secure” then clicking “Certificate is valid”. Below is what it looks like in Chrome, but it’s similar in Edge.

The validity period is then shown in the pop-up. I would recommend putting an annual reminder in your calendar to renew the certificate a few weeks before it’s expiry, so that you have plenty of time to resolve any issues.  

Also, note that after uploading the new certificate, Docebo will state that it was successful and show the new expiry date. But don’t take the LMS’s word for it!  After installing the new one, always use the above browser check to make sure the new certificate really is installed properly. 

Hope this helps!

Alan

Hi @Alan 

Thanks so much - this is exactly what I was looking for!

Just wanted to summarize the answers here for future reference:

• The old certificate needs to be removed in order to generate the CSR file required to apply for the new certificate.
• However, the old certificate remains active until the new certificate is uploaded (as long as it hasn’t expired yet).

For more information, please see the help article below.

https://help.docebo.com/hc/en-us/articles/360020125119-Activating-and-Managing-the-HTTPS-App

So, all of this has changed with the new “Domain Management” page.  There is no longer the ‘create a csr’ feature...Why was that removed?