When renewing a multi-domain certificate, can adding new domains extend the validity period?

Issue Summary

When renewing a multi-domain certificate, if you need to add new domains, different brands have different rules for handling the validity period. They mainly fall into the following two categories:

• GeoTrust, DigiCert: If the original domains remain unchanged and new domains are added, the remaining validity period of the original certificate can be carried over.
• Sectigo root certificates: Regardless of whether new domains are added, all renewals uniformly extend the validity period by 1 month.

Note

• CFCA certificates: Adding new domains cannot be processed as a renewal and can only be treated as a new order.
• GlobalSign: Whether or not new domains are added during renewal, all certificates are uniformly issued with a 13-month validity period.

Detailed Instructions

GeoTrust / DigiCert certificate renewal rules

• Adding new domains does not affect validity period continuity:

  At the time of renewal, if you only add new domains while keeping the original domains unchanged, the validity period of the new certificate will automatically carry over the remaining duration of the old certificate. For example:

  • If the old certificate has 30 days remaining and you renew it for a 1-year certificate, the total validity period of the new certificate is 30 days + 1 year.

• Applicable scenarios:

  Suitable for situations where you want to maximize the use of remaining validity time while expanding domain coverage.

Sectigo root certificate renewal rules

• Uniform 1-month extension of validity period:

  Regardless of whether new domains are added, each renewal will grant an additional 1 month of validity period on top of the original expiration date. For example:

  • If the old certificate expires on June 1, 2024, the new certificate after renewal will expire on July 1, 2025.

• Notes for adding new domains:

  If new domains are added, Domain Control Validation (DCV) must be re-performed for the new domains, but the rule of granting 1 additional month remains unchanged.

Example Scenarios

Suppose your current certificate covers 3 domains (A/B/C) and expires on December 31, 2024:

• Scenario 1 (GeoTrust/DigiCert): Add domain D when renewing, the validity period of the new certificate = remaining days + 1 year.

  Result: The new certificate covers A/B/C/D and is valid until December 31, 2025 + remaining days.

• Scenario 2 (Sectigo): Regardless of whether domain D is added, the validity period of the new certificate is uniformly extended to January 31, 2025.