Apr 14, 2016 Question: Q: Can't renew mac server code signing certificates More Less Apple Footer This site contains user submitted content, comments and opinions and is for informational purposes only. Dec 17, 2019 Mac App Distribution certificate that will be used to sign the application; and; Mac Installer Distribution certificate, to sign the installer. Be careful when naming the certificate requests for these keys: use descriptive names that include the text Application and Installer so they can be distinguished later.
The APNs certificate has a validity of 1 year from the date of creation, so it is better to renew the existing one before the date of expiration or create a new APNs certificate every year. Renew the certificate with the same Apple ID that was used to create the certificate for the first time.
Got an alert on El Capitan 10.11.4 server that the certificate is going to expire. I click the 'renew' button and it says Unknown Error. So I dig deeper and run the following on the command line
/Applications/Server.app/Contents/ServerRoot/usr/sbin/certadmin --recreate-CA-signed-certificate: Unable to renew identity 'macserver.local Code Signing Certificate': unable to renew certificate: could not find original certificate 'macserver.local Code Signing Certificate' with serial number 'dd3d0ec3' issued by 'IntermediateCA_MACSERVER.LOCAL_1' (-25300)
So I run the following to search the certificate and it does find it: