Renewing Certificates

Certificate Expiry

Both self-signed and Root CA-signed issuer certificates issued by ToolsControl are valid for 13 months. ToolsControl also handles automatic renewal of certificates by issuing a new certificate a week before the old one expires. It is also possible to generate a new certificate manually at any time, if needed.

For self-signed certificates, all users must again trust the renewed certificate manually in the browser. For Root CA-signed issuer certificates, or if the users have manually added the ToolsControl issuer CA to the list of explicitly trusted issuer CAs, there is no need to do anything. Any renewed certificates will automatically be trusted, unless your Root CA expires or is removed. The intermediate issuer CA is valid for 20 years.

Changing IP or DNS name

If the Single IP or a DNS name changes, an administrator must generate a new certificate with the new settings.