# Intermediate Certificate Expired

**URL:** <https://community.ciphermail.com/t/intermediate-certificate-expired/541>\
**Category:** Gateway\
**Created:** [April 17, 2017, 7:32pm UTC](https://community.ciphermail.com/t/intermediate-certificate-expired/541 "2017-04-17T19:32:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Heater\_B\_Roger](https://avatars.discourse-cdn.com/v4/letter/h/c77e96/32.png) [@Heater\_B\_Roger](https://community.ciphermail.com/u/Heater_B_Roger)\
**Post date:** [April 17, 2017, 7:32pm UTC](https://community.ciphermail.com/t/intermediate-certificate-expired/541/1 "2017-04-17T19:32:37Z")

</div>

Our Self Signed Root certificate does not expire for years, however, our intermediate certificate, which is the default CA in DJIGZo and the certificate that issued all of our individual users' certificates expired at the end of March.

Is there a way for us to renew the default CA intermediate certificate that has expired in DJIGZO so that the encryption certificates for all the users do not need to be recreated?

Thanks,  
Roger

[cid:image001.png(a)01D2B78E.20BD4680]\<[Business & Corporate Lawyers | Howard & Howard](http://www.howardandhoward.com/&gt);  
NOTICE: Information contained in this transmission to the named addressee is proprietary information and is subject to attorney-client privilege and work product confidentiality. If the recipient of this transmission is not the named addressee, the recipient should immediately notify the sender and destroy the information transmitted without making any copy or distribution thereof.

ELECTRONIC SIGNATURE: Nothing contained in this communication is intended to constitute an electronic signature unless a specific statement to the contrary is included in this message.

![image001.png](https://europe1.discourse-cdn.com/flex017/uploads/ciphermail/original/1X/770ec3d84ec1c6b392dfb2f6a03bb8875252fde0.png)

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [April 18, 2017, 7:50pm UTC](https://community.ciphermail.com/t/intermediate-certificate-expired/541/2 "2017-04-18T19:50:34Z")

</div>

Unfortunately that is not possible with the CA certs generated with  
CipherMail. The best thing would be to create a new CA (root and  
intermediate) and make sure it's valid for a very long period (for  
example 20 years). The existing keys can still be used for decryption in  
case some sender still uses the old certificates.

Instead of using the built-in CA, you might consider using an external  
CA and create the root and intermediate(s) externally and then import  
them into CipherMail. This might give you more flexibility. The built-in  
CA is not as feature rich as a full blown CA server.

Kind regards,

Martijn Brinkers

> **···**
>
> On 04/17/2017 09:32 PM, Heater, B. Roger wrote:
> 
> > Our Self Signed Root certificate does not expire for years, however,  
> > our intermediate certificate, which is the default CA in DJIGZo and  
> > the certificate that issued all of our individual users' certificates  
> > expired at the end of March.
> > 
> > Is there a way for us to renew the default CA intermediate  
> > certificate that has expired in DJIGZO so that the encryption  
> > certificates for all the users do not need to be recreated?
> 
> --  
> CipherMail email encryption
> 
> Email encryption with support for S/MIME, OpenPGP, PDF encryption and  
> secure webmail pull.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)