Standard Certificate Replacement Policy

Change: Subject Alt Name (SAN) Changes Common Name Changes Installation or Configuration Problems Loss of Private Key Change in Hosting Providers or Servers
Standard One-Time Within 30 days:
Entrust offers a one time, no charge replacement (same expiry date) for a common name or Subject Alt Name (SAN) change within thirty (30) days of the original issue date.
Unlimited Replacements
Entrust offers unlimited replacements (same expiry date) for any installation or configuration problems throughout the life of your certificate.

Please note:
Entrust will refer you to your vendor if the problem cannot be fixed within 2-3 reissue attempts. Once the vendor works with you to resolve the problem, Entrust will continue to work with you and attempt further reissues.

Unlimited Replacements

Entrust offers unlimited replacements (same expiry date) for the loss of private keys throughout the life of your certificate.

Please note:
Entrust strongly recommends that you backup your private key or keypair to prevent loss. For more information on how to back up your private key, you can go to https://www.entrust.com/supported-browsers-ssl/, select the web server and then go to “Disaster Recovery”.

The private key and CSR should be newly created in the event of a key loss.

Unlimited Replacements
Entrust offers unlimited replacements (same expiry date) for any change in hosting providers or servers.
Advantage
Wildcard
UC Multi-Domain Unlimited Additions of SAN’s:
Entrust offers unlimited replacements due to required additions of Subject Alt Names (SAN’s) (same expiry date as underlying certificate) throughout the life of your certificate, providing the SAN’s are purchased or withdrawn from existing inventory.
One-Time Within 30 days:
Entrust offers a one time, no charge replacement (same expiry date) for a common name change within thirty (30) days of the original issue date.

Example:
Certificate was issued to entrust.com. A certificate that is reissued for web.entrust.com will be accepted. The top level domain needs to stay the same. A request for www.entrust.net will not be accepted.

EV Multi-Domain
Code Signing N/A N/A 30 Day Replacements:
Entrust offers free replacements within thirty (30) days of the original issue date, for any installation or configuration problems.
Entrust offers no replacements for loss of private key N/A
Document Signing Certificate N/A 30 Day Replacements:
Entrust offers free replacements within thirty (30) days of the original issue date, for any installation or configuration problems, or loss of private key problems.

After 30 days of issue date, we charge an Admin fee to perform a replacement.

N/A
Secure Email Personal Entrust offers no replacements at any time for any reason for Secure Email Personal certificates.
Secure Email Enterprise N/A Entrust offers no replacements for common name changes Unlimited Replacements:
Entrust offers unlimited replacements (same expiry date) for any installation or configuration problems, any suspected key compromises or loss of private key problems, throughout the life of your certificate.
N/A

Notes:

When replacing or re-issuing certificates, the replaced certificates will be revoked.

Last Updated: March 28, 2016