Forum Discussion

Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Oct 25, 2018

Difference between SSL certificate renewal and new certificate installation.

Hi Guys,

 

I need to renew a SSL certificate for a VIP. Should I generate a CSR and get a new certificate? or can I renew the old one?

 

Thanks, Nilesh

 

application delivery
LTM
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Oct 25, 2018

    That generally depends on whether or not you want to keep the attributes of the current certificate (subject, issuer, ciphers, etc.). If you do, then it's easiest to simply renew the current certificate.

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Oct 30, 2018

    Hi Nilesh,

     

    you have 2 choices:

     

    • generate a new cert/key which involves generating a new key (And provide your CSR to your CA).

       

    • Or just renew you certificat which involves keeping your private key (And provide your CSR to your CA).

       

    In both case you can Modify/Add attribute (Common Name, SAN, ...).

     

    But if you want to renewal your cert you need to generate a CSR à Unless if you delegate the creation of your certificate (private and public key) to your CA what I do not advise you.

     

    regards