A pharmacy can renew its DEA registration and still be unable to sign electronic controlled-substance orders. The signing certificate does not move forward with that renewal.
This page owns CSOS signing-certificate expiration and renewal dates. The registration clock lives on DEA registration expiration tracking. Number lookup lives on DEA Controlled Substances Registration tracking. (General information only - not regulatory advice. See Sources.)
Remindax tracks signing-certificate expiration dates, 45-day notice dates, and renewal-cycle status you log. It does not look up numbers, renew certificates, file applications, or give regulatory advice.
1. What is CSOS signing certificate expiration tracking?
A signing certificate is issued to one person and one DEA registration number, and that person uses it to sign electronic controlled-substance orders. Tracking means logging the end date, the 45-day notice, the subscriber, and the renewal cycle - then reminding that person. Remindax does not look up numbers. Lookup stays on DEA Controlled Substances Registration tracking. The registration end date stays on DEA registration expiration tracking.
1.1 Six facts on one signing-certificate row
Certificate expiration
The end date on that signing certificate, set from the registration expiration date at issuance.
Renewed in addition
Must be renewed in addition to the DEA registration. A new registration term does not replace this row.
45-day notice
Under 21 CFR 1311.40(b), the holder is notified 45 days before the certificate expires. Log that date. Not a filing checklist.
One person, one registration
Each signing certificate is one registration number and one individual. Three locations means three rows.
Which renewal cycle
Under 21 CFR 1311.40(c), online renewal may be used twice. The third renewal needs a new application. Track the cycle. No application steps here.
Registration, inventory, admin
Registration expiration, biennial inventory dates, and an administrative certificate are different credentials. See the note below. Do not merge them into this row.
An administrative certificate is not this row. A 2006 DEA support guide describes one used for communications, not orders, valid three years from issuance and not tied to one registration. DEA's current questions page also describes administrator roles that are not issued a certificate. Compliance tracking should keep the signing certificate beside the registration, not inside it.
2. When does a CSOS signing certificate expire?
Under 21 CFR 1311.40(a), a CSOS certificate expires on the DEA registration date it is based on. A new certificate is required when that registration expires, or when the registered name, address, subscriber name, or schedules change. Do not copy a later registration end date onto the old certificate.
DEA's certificate management page and the CSOS Subscriber Manual, version 3.2 (August 26, 2025), state that a signing certificate expires when the associated registration expires and must be renewed in addition to it. Keep the registration date on DEA registration expiration tracking.
21 CFR 1311.40(b) notifies the holder 45 days before expiration. The manual emails the subscriber and the coordinator. DEA's renewal page says subscribers renew their own certificates and coordinators are no longer allowed to renew one. Remind the subscriber. Confirm with DEA.
Under 21 CFR 1311.40(c), a holder who applies before expiration may renew online twice. The third renewal needs a new application. Under 21 CFR 1311.40(d), a certificate that expires first also needs a new application. Track the cycle. Remindax does not list documents or file anything.
Each certificate belongs to one person and one registration number, and nobody else may use it. Certificates from different registration terms can end on different dates. DEA states there is no charge for the certificate. A CSOS reporting username does not expire and is not this row.
3. Why tracking signing-certificate dates matters
The registration can look current while the signing certificate is already expired. The federal email helps only if it still reaches the subscriber:
Registration renewed, certificate not
A later registration term does not move a certificate set at issuance. Both dates need an owner.
The 45-day note hits a dead inbox
DEA emails the subscriber address on file. If that person left, the notice never reaches the buyer who still signs orders.
A coordinator is not a substitute owner
The renewal page says coordinators are no longer allowed to renew a certificate. A reminder that stops at the coordinator misses the person DEA tells to act.
The third cycle is a longer lead
Under 21 CFR 1311.40(c), the third renewal is a new application. The 45-day mark is late if nobody flagged the cycle.
Teams on health and safety cycles usually keep this date in the same register as the registration - on its own row, not as a checkbox inside the registration record. A pharmacy permit is a third date again.
4. Who needs to track CSOS signing certificate expirations
Anyone who owns a certificate end date, not a one-time number check:
Power-of-attorney buyers
Each person who signs electronic orders has a certificate. Unlimited buyers means unlimited rows.
Store and hospital pharmacies
The registrant's signing certificate and each buyer's certificate expire on the dates they were issued against.
One person, many registrations
DEA's questions page says one certificate per registration number. Central buying does not collapse those dates.
Compliance leads
Portfolio view of certificate end dates beside registration end dates, without merging the clocks.
Learn MoreSite and safety teams
Need the certificate date kept apart from inventory dates and the state permit.
Learn MoreReporting logins
Supplier CSOS reporting usernames are described as non-expiring. They are not signing certificates.
5. What happens when signing-certificate dates slip
The quiet miss is a registration renewed on time and a signing certificate left behind. The August 2025 manual states the result: the subscriber cannot sign electronic orders. Under 21 CFR 1311.40(d), a certificate that expires before renewal is requested needs a new application, not the in-time online path. One buyer can be blocked while another at the same location is current. Revocation is separate: DEA describes listing the certificate so relying parties will not accept it. Record revoked on its own. Do not clear the expiration.
A renewed registration (see DEA registration expiration tracking) and a completed biennial inventory do not move the signing-certificate date. Track those as separate hard deadlines.
6. How Remindax tracks CSOS signing certificate expirations
Remindax is date-and-status tracking with reminders - not a CSOS portal, number checker, or filer:
Every certificate in one dashboard
Expiration, 45-day notice date, and renewal cycle (first, second, or third) held per person and registration number.
Staged Email, SMS, and WhatsApp reminders
Alerts before the 45-day notice and again before expiration, to the subscriber, with an optional copy to a coordinator.
Separate from the registration row
See which certificates end this quarter even when the registration row was just renewed.
Status exports
Pull expiration dates and status - active, nearing expiration, expired, or revoked as you recorded it. Dates and status only.
Remindax does not look up numbers, verify them, renew certificates, submit applications, or decide whether an order may be signed. Your organization handles that. Remindax keeps the dates from arriving unnoticed.
7. Why spreadsheets fail for signing-certificate tracking
A spreadsheet of registration end dates still hides the certificate when that column is copied from the registration, two buyers share a row, or only a coordinator is named.
- xCertificate end date copied from the renewed registration
- xOnly the coordinator is named, and that person left
- xSeveral buyers share one expiration cell
- xNo reminder at 45 days, and no flag for the third cycle
- ✓Each person and registration number has its own certificate date
- ✓Reminders before the 45-day notice and before expiration
- ✓Subscriber owns the row; coordinator is only a copy
- ✓Email, SMS, and WhatsApp to people who can act
8. Key takeaways
- ✓Track the signing-certificate end date and the 45-day notice - not a number lookup, not verification, and not an application how-to.
- ✓The certificate expires on the DEA registration date it was based on at issuance. It must be renewed in addition to the registration. Those are two rows.
- ✓Under 21 CFR 1311.40, notice is 45 days ahead. Online renewal is twice. The third renewal, or any renewal after expiration, is a new application. Confirm in Sources.
- ✓One certificate per person per registration number. Administrative certificates, and administrator roles with no certificate, are out of scope.
- ✓Remindax tracks dates and reminds by Email, SMS, and WhatsApp. It does not look up, verify, renew, file, or give regulatory advice. Free to start.
9. Frequently Asked Questions
Logging each expiration, the 45-day notice, and the renewal cycle, then reminding the subscriber. Not lookup, verification, or filing.
On the DEA registration date the certificate was based on at issuance. 21 CFR 1311.40 and DEA's renewal page both tie the signing certificate to that date. Confirm in Sources.
No. The dates are linked, but the certificate is renewed on its own. A new registration term does not extend a certificate set to the prior end date. Keep registration dates on DEA registration expiration tracking.
The subscriber. Notice is 45 days under 21 CFR 1311.40(b). DEA's renewal page says coordinators are no longer allowed to renew a certificate. Copy a coordinator only as backup.
A signing certificate signs electronic orders and expires with the registration date it was based on. A 2006 DEA guide describes an administrative certificate for communications, not orders, valid three years from issuance. This page tracks signing dates only.
No. Remindax stores dates you enter and sends Email, SMS, and WhatsApp reminders. Lookup, verification, and filings stay with your organization. See DEA Controlled Substances Registration tracking for lookup and verification.
Yes. Each person, and each registration number that person signs for, gets a separate expiration and separate reminders.
Yes - a forever-free plan, no credit card required.
Sources & References
Public pages on signing-certificate expiration timing - not regulatory advice. Confirm with DEA. The 2006 guide is cited only to distinguish an administrative certificate.
- *21 CFR 1311.40 - Renewal of CSOS digital certificates (Cornell LII)
- *DEA Diversion - CSOS signing certificate renewal and expiration
- *DEA Diversion - CSOS certificate management (signing certificate renewal)
- *DEA Diversion - CSOS questions and answers
- *DEA Diversion - CSOS Subscriber Manual, version 3.2 (August 26, 2025)
- *DEA Diversion - CSOS Certificate Support Guide, version 1.1 (October 1, 2006), administrative versus signing certificate
Never miss a signing-certificate expiration
Track every CSOS signing certificate expiration and 45-day notice - automatically.
GDPR-ready | AWS secure cloud | Encrypted storage | Setup under 5 minutes