Express Download

Express Download provides a streamlined way to obtain your SSL Certificate files quickly when you need them. This feature allows you to download your issued SSL Certificate directly without completing the full verification process required for other tracking system operations.

Express Download is available for traditional SSL Certificates and provides instant access to your SSL Certificate files. This is particularly useful when you need to reinstall your SSL Certificate on a server or configure additional services that require your SSL Certificate chain.

What You Can Download

Express Download provides all the SSL Certificate files you need to install and configure your SSL Certificate on any compatible server or platform. The download includes your end-entity SSL Certificate, the complete Certificate chain including Intermediate Certificates, and the full chain with root Certificate Authority (CA) Certificate.

Your download package also includes a PKCS#7 format file, which is required by certain platforms and applications that do not accept standard PEM format files. All files are packaged together in a single compressed archive for convenience. Learn About Intermediate Certificates 🔗

What You Will Need

To use Express Download, you will need your Certificate Authority (CA) Reference number and the domain name secured by your SSL Certificate. Your Certificate Authority (CA) Reference number was provided when your SSL Certificate was originally issued and can be found in your order confirmation e-mail or customer account.

You will also need to select whether your SSL Certificate is a Trustico® branded product or a Sectigo branded product. This information appears on your order confirmation and in your customer account order history. Discover Certificate Authority (CA) Reference vs Order Number 🔗

How Express Download Works

Express Download verifies your identity by matching your Certificate Authority (CA) Reference number with the domain name on your SSL Certificate. Once these details are confirmed, you can download your SSL Certificate files immediately.

The verification process is simplified compared to full tracking system access because the files you are downloading contain only public information. Your SSL Certificate files include your public key and the Certificate Authority (CA) chain data, which are designed to be publicly accessible as part of how SSL Certificate trust works on the internet.

Your Private Key is never stored by Trustico® or included in any download. The Private Key exists only on your server where it was generated alongside your Certificate Signing Request (CSR). Learn About Private Key Security 🔗

Using Express Download

Visit the Trustico® tracking system and enter your Certificate Authority (CA) Reference number, domain name, and select your product type. When Express Download is available, click the download button to receive your SSL Certificate files.

Your files download automatically as a compressed archive. Extract the archive to access your individual SSL Certificate files, then install them on your server according to your platform requirements. Explore SSL Certificate Installation Guides 🔗

If you require access to additional tracking system features such as reissuing your SSL Certificate or checking validation status, you will need to complete the standard verification process.

When to Use Express Download

Express Download is ideal when you need quick access to your existing SSL Certificate files for installation or configuration purposes. Common scenarios include setting up a new server, migrating your website to a different hosting provider, or configuring additional services that require your SSL Certificate chain.

If you have lost your original SSL Certificate files or need to reinstall after a server issue, Express Download provides the fastest way to obtain current copies of your SSL Certificate. The files provided are always the most recently issued version of your SSL Certificate, but this does not include any SSL Certificate that has not yet been issued through a reissue request.

When You Need to Reissue Instead

You must use the full tracking system with standard verification to reissue your SSL Certificate in the following situations. If your SSL Certificate has expired or will expire soon and you have remaining license validity to claim, you need to reissue. If your Private Key has been lost or compromised and you need a new SSL Certificate bound to a new Private Key, you need to reissue. If you are migrating servers and need to generate a new Certificate Signing Request (CSR), you need to reissue.

Reissuing generates a completely new SSL Certificate and allows you to claim remaining validity from multi-year licenses. Express Download cannot perform these operations. Learn About How to Reissue Your SSL Certificate 🔗

Certificate as a Service (CaaS) Customers

Express Download is designed for traditional SSL Certificates. If you have a Certificate as a Service (CaaS) subscription, your SSL Certificates are managed through your Automatic Certificate Management Environment (ACME) client, which handles Certificate retrieval and installation automatically.

Certificate as a Service (CaaS) customers can access their External Account Binding (EAB) credentials through the dedicated credentials page or your order details page. Learn About Certificate as a Service (CaaS) 🔗

Troubleshooting Express Download

If Express Download indicates that your details do not match, verify that you have entered your Certificate Authority (CA) Reference number correctly and that the domain name matches exactly what appears on your SSL Certificate. Domain names are case-insensitive but must otherwise match precisely.

For Multi-Domain SSL Certificates, enter the primary domain name that was specified when your SSL Certificate was ordered. This is typically the first domain listed on your SSL Certificate and appears in your order confirmation. Learn About Multi-Domain SSL Certificates 🔗

If you continue to experience difficulties, ensure you have selected the correct product type. Selecting the wrong type will prevent access to your SSL Certificate files.

Repeated failed attempts may temporarily restrict access to protect against unauthorized use. If you believe you have been restricted in error, wait 24 hours before trying again or contact support for assistance. Explore Support Options 🔗