Upgrade your certificate to 2048 bit before 31st December 2013.


CA/B forum and NIST guidelines mandate that all SSL certificates must be of at least 2048 key length by end of year.

Starting from January 1st 2014, all SSL certificates with keys length less than 2048 bit must be out of use (expired or revoked). The power of modern computers has accelerated in recent years and is expected to continue, which could increase the chance that 1024 bit keys could be cracked by brute force. The new requirements are designed to ensure SSL encryption continues to be resilient to attacks from advanced hardware that may be available hackers in future years. To strengthen security and deter brute force attacks, the National Institute of Standards (NIST) and the Certificate Authority/Browser (CA/B) forum have mandated that all SSL certificates should have a minimum key length of 2048 bits after 2013. Comodo advises you to check your SSL certificate and, if required, take the appropriate steps to upgrade.

How do I check the key length of my certificate?

Comodo offers a very simple tool to analyze your certificate. Visit sslanalyzer.comodoca.com/, enter your domain name and run the analysis. Check the 'Key' row to find the key length of your SSL certificate. If it is 2048 bit or higher then you are fine. If it is 1024 bit or indeed any key length below 2048, then please take the following steps to upgrade.

How to upgrade

  • If your 1024 bit certificate expires on or before 31st December, simply make sure to generate a 2048 CSR when renewing your certificate.
  • If you have a 1024 bit certificate that expires after 31st December, you should apply for a FREE replacement before the deadline. In preparation for this, first generate a 2048 bit CSR on your web-server then:
    • Login at support.comodo.com/index.php and create a support ticket requesting that your certificate is replaced with a 2048 bit certificate. Please remember to mention your order number, domain name, web-server software and to attach your 2048 bit CSR to the ticket.
    • OR
    • Web Host Reseller and EPKI account holders can simply log into their accounts, locate the certificate order in question and click the 'Replace' button.

This support page contains more help on certificate replacement.

How do I generate a 2048 bit CSR?

Click the following for help generating a 2048 bit CSR for popular web server types:

Click the links below for guidance on installing your certificate:

For more information about Comodo SSL certificates, visit: ssl.comodo.com/

Comodo SSL solution experts can be contacted directly by emailing sales@comodo.com

Featured Client

Featured Video

Click here to watch the featured video

E-commerce Bundle

Comodo E-commerce bundle

Everything you need to increase revenue online and comply with mandatory security standards.
Increase Your Conversion

Contact an Expert

Contact us for consultation on your security needs.

Contact an expert

White Paper

See how 2048-bit certificates keep you ahead

Read more

Webinars On-Demand

Get in-depth coverage of the topics important to you with live help to answer your questions.

See E-Commerce Webinars

Verify and secure your site with COMODO. Get your SSL Certificate FAST, Order instantly and easily!. Our SSL is fully trusted by all known browsers.

Comodo Antivirus protection makes your PC impervious to viruses. More than 40 million computers protected by Comodo Internet Security software. Try Now!