To make sure that your website is continuously secured,
you need to timely renew the installed SSL/TLS certificate.
The SSL It! extension can help you with that.
SSL It! automatically renews free SSL/TLS certificates
from Let’s Encrypt and DigiCert
30 days in advance of their expiration.
SSL It! cannot automatically renew paid SSL/TLS certificates.
However, you can:
- Reissue them manually.
- Have SSL It! automatically replace expired SSL/TLS certificates
with free ones from Let’s Encrypt.
To reissue paid SSL/TLS certificates:
-
Go to Websites & Domains > your domain
secured with a paid SSL/TLS certificate
that is going to expire > SSL/TLS Certificates. -
Click Reissue Certificate.
Then you will be automatically redirected to Plesk Online Store. -
Fill in your address, payment information, and then buy the certificate.
-
Go back to Plesk (use the Back button in your browser).
-
Processing the payment takes some time.
To update the payment status, click Reload.
Plesk automatically updates the payment status once per hour. -
Once the payment has been processed, click Fill In Required Data.
-
Fill in the required contact information
and then click OK. -
Plesk now automatically creates a certificate signing request (CSR)
and then receives and installs the SSL/TLS certificate.
It may take some time depending on the type of the SSL/TLS certificate.
You can update the SSL/TLS certificate status manually
clicking Reload or you can just wait until Plesk does it automatically
(Plesk checks the SSL/TLS certificate status once per hour).
To automatically replace paid expired SSL/TLS certificates with free ones from Let’s Encrypt:
- Go to Websites & Domains > your domain secured with a paid SSL/TLS certificate
that is going to expire > SSL/TLS Certificates. - Turn on “Keep websites secured”.
Now when your paid SSL/TLS certificate expires,
SSL It! automatically issues a free SSL/TLS certificate from Let’s Encrypt
to secure domains, subdomains, domain aliases,
and webmail belonging to the subscription.
It should happen no later than one hour
after the SSL/TLS certificate expires.