Steps to Update SSL Certificates

Follow these steps to update your SSL or S/MIME certificate and avoid becoming a public target!

  1. Determine the Type of Certificate: Is it an S/MIME (email) certificate or an SSL (web) certificate?
  2. Locate the Expired Certificate: Check the certificate store, keystore, or Oracle Wallet if it's an Oracle system. Use tools like OpenSSL or a web browser to inspect the certificate details.
  3. Obtain a New Certificate:
    • For S/MIME certificates: Request a new one from your internal PKI or trusted CA.
    • For SSL certificates: Generate a new CSR and obtain a certificate from a trusted CA (e.g., Let’s Encrypt or DigiCert).
  4. Install the New Certificate:
    • For Oracle-based systems, use Oracle Wallet Manager to install the new certificate.
    • For S/MIME certificates, install the new certificate in your email system (Outlook, Google Workspace, etc.).
  5. Verify the Certificate: Use OpenSSL, browser tools, or SSL Labs to ensure the new certificate is properly installed.
  6. Set Up Reminders or Auto-Renewal: Use Certbot (Let’s Encrypt) for SSL certificates or set up email reminders to ensure the next renewal happens before expiration!