Can one import certificates and activate them later?

[Michael Schönburg]

Is it possible under Linux (Debian 10) to import the new ssl certificate for the pbx before the current certificate expires, so that there is no downtime? Does Debian automatically change the certificate or is there no way to replace the certificate for the 3CX without downtime? How do you guys manage this?

 

[SteveITS]

Usually when a custom cert is renewed the valid period is that day through the old cert's expiration, plus 1 year. An example may be easier to explain:

original: valid Oct 1 2022 to Sept 30 2023
renewed on Sept 23: valid Sept 23 2023 to Sept 30 2024

Or when purchasing a new cert often they offer to add 30 days extra, to create the overlap.

 

[Alejandro_3CX]

Is it possible under Linux (Debian 10) to import the new ssl certificate for the pbx before the current certificate expires, so that there is no downtime? Does Debian automatically change the certificate or is there no way to replace the certificate for the 3CX without downtime? How do you guys manage this?

Using a 3CX FQDN the ssl certificates will be renewed automatically without downtime.

If you are using a custom domain, when replacing them please note that the nginx service must be restarted.