Renewing a certificate
Written by
Updated at January 20, 2026
Certificate Manager initiates the certificate renewal procedure 30 days before it expires. The certificate status will change to Renewing.
Note
In some cases, certificates can be renewed without any user action. For more information, see Checking rights automatically.
To update a Let's Encrypt certificate:
Management console
API
- In the management console, select the folder the certificate was added to.
- Go to Certificate Manager.
- In the list, select the certificate with the
Renewingstatus you need to update. - In the window that opens, under Check rights for domains, you will see the details required to pass the domain rights check. For more information, see Domain rights check.
- As soon as the domain rights check is passed, the check status under Check rights for domains will change to
Valid. - After the check status for all the domains changes to
Valid, the certificate will be issued and its status will change toIssued.
To renew a certificate, use the update REST API method for the Certificate resource or the CertificateService/Update gRPC API call.
Note
For a successful DNS domain rights check based on a CNAME record, make sure the _acme-challenge subdomain of the domain name you are checking has no other resource records except CNAME. For example, for the _acme-challenge.example.com. domain name, there should only be a CNAME record and no TXT record.