startssl的免費(fèi)ssl證書(shū)有一年的有效期（包括登錄startssl的用戶登錄證書(shū)和域名ssl證書(shū)）。上年申請(qǐng)的StartSSL的免費(fèi)SSL證書(shū)快要過(guò)期了，需要renew。StartSSL證書(shū)的續(xù)期步驟和新申請(qǐng)證書(shū)的步驟差不多。請(qǐng)閱讀本文并參考《全球唯一免費(fèi)HTTPS證書(shū)頒發(fā)機(jī)構(gòu)：StartSSL申請(qǐng)圖文詳細(xì)教程》

續(xù)期步驟為：
1）更新用戶登錄證書(shū)
2）更新域名ssl證書(shū)

在用戶證書(shū)過(guò)期前兩星期注冊(cè)郵箱會(huì)收到類似提示郵件：

This mail is intended for the person who owns a digital certificate issued by the StartSSL Certification Authority (http://www.startssl.com/).
 The Class 1, client certificate for xxx@xxx.com and serial number xxxxxx (xxxxx) is about to expire in about two weeks. Please log into the StartSSL Control Panel at https://www.startssl.com/?app=12 and get a new certificate for this purpose. Failing to update your client certificate might result in the loss of your account.
 Should you have lost the client certificate which was previously issued to you, please register once again - login without the client certificate installed into your browser will not work in that case.

瀏覽器訪問(wèn)https://www.startssl.com/?app=12，如果用戶證書(shū)已過(guò)期只能重新注冊(cè)一個(gè)帳號(hào)了。

1、導(dǎo)入之前注冊(cè)時(shí)得到的p12證書(shū)，然后登陸到Control Panel:
Validations Wizard -> Type: Domain Name validation -> Enter Domain Name -> Select Verification Email -> 輸入Email收到的Verification code -> finish;

2、Certificates Wizard -> Certificate Target: Web Server SSL/TLS Certificate -> 輸入密碼或跳過(guò) -> 保存好key -> 選擇需要部署SSL的域名 -> 等待審核;

3、(收到Email審核成功的通知后) Tool Box -> Retrieve Certificate -> 選擇剛申請(qǐng)的域名, Continue -> 保存好Certificate.

至此，得到新的SSL證書(shū)。過(guò)期時(shí)間是2013-05-10，如下圖。

問(wèn)題是，登陸StartSSL控制面板不是通過(guò)帳號(hào)密碼，而是使用個(gè)人證書(shū)來(lái)驗(yàn)證的。如上圖紅圈處，這個(gè)人證書(shū)過(guò)期時(shí)間并無(wú)更新，仍然是2012年5月22日。所以，我們不但要renew站點(diǎn)的SSL證書(shū)，還要renew這個(gè)用于登陸StartSSL的證書(shū)。否則，明年（準(zhǔn)確來(lái)說(shuō)是十幾天后）就無(wú)法登陸StartSSL了。(只能重新注冊(cè))

renew這個(gè)個(gè)人證書(shū)，只需重新驗(yàn)證EMail:

1、 Validations wizard -> Type: Email Address Validation -> Enter Email Address -> 輸入Email收到的Verification code -> finish;

2、 Certificates wizard -> Certificate Target: S/MIME and Authentication Certificate -> Generate Private Key -> Select Email Address -> Your S/MIME client certificate is installed in your browser;

3、 Tool Box -> Retrieve Certificate -> 選擇新申請(qǐng)的Email, Continue.

至此，得到新的p12個(gè)人證書(shū)。過(guò)期時(shí)間2013年5月10日。

然后再備份好這個(gè)新的p12個(gè)人證書(shū)，以備后用。