Reissue Cloudflare SSL Certificate Manually

Here goes nothing …

How to renew or reissue a free SSL Certificate from Cloudflare in ten minutes!#

1. Go to your domain on Cloudflare
2. Head over to the SSL ❯ Edge Certificates
3. Way down there, [Disable Universal SSL]
4. Go ahead and do this; expect 10 minutes of downtime
5. Wait for 10 minutes or so — and then, surprise surprise
6. Go ahead and [Enable Universal SSL]

How can I verify this worked?#

Two ways, really. First, at the top on the same page, in the `Edge Certificates` section, note when the SSL will expire. When you re-enable universal SSL, this area will show pending verification and, in a bit, will show you the new SSL with an expiration date three months from now (or later than the previous SSL expiration date).

Second way? If you’re like me, I have a fancy shell function to check the SSL info of a domain. Looks like this:

# Check SSL info of a domain
ssl() {
	if [ -z "$1" ]; then
		echo "Usage: ssl <domain>"
		return 1
	fi

	domain=$1

	echo | openssl s_client -servername $domain -connect $domain:443 2>/dev/null | openssl x509 -noout -text
}

Now all you have to do is check ssl example.com and you can find the ‘Not After’ date. Or do a grep with ssl example.com | grep 'Not After'.

Use your code for good!
Best,
AA