A replacement certificate is a newly issued digital certificate that takes the place of one that has expired, been revoked, or otherwise become untrusted. For a website, it typically contains the information needed for TLS connections and chains to a trusted certificate authority.
Replacing a certificate restores clients’ ability to validate a service’s identity and establish secure connections, provided the new certificate is correctly installed across all relevant endpoints. In real operations, teams use certificate inventories, renewal alerts, and deployment checks to replace certificates quickly after revocation or expiry. Delays or incomplete rollout can cause browsers and other clients to reject connections, turning a trust correction into an availability problem.