Forum Discussion

Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Oct 25, 2018

Difference between SSL certificate renewal and new certificate installation.

Hi Guys,

 

I need to renew a SSL certificate for a VIP. Should I generate a CSR and get a new certificate? or can I renew the old one?

 

Thanks, Nilesh

 

2 Replies

  • Hi Nilesh,

     

    you have 2 choices:

     

    • generate a new cert/key which involves generating a new key (And provide your CSR to your CA).

       

    • Or just renew you certificat which involves keeping your private key (And provide your CSR to your CA).

       

    In both case you can Modify/Add attribute (Common Name, SAN, ...).

     

    But if you want to renewal your cert you need to generate a CSR à Unless if you delegate the creation of your certificate (private and public key) to your CA what I do not advise you.

     

    regards

     

  • That generally depends on whether or not you want to keep the attributes of the current certificate (subject, issuer, ciphers, etc.). If you do, then it's easiest to simply renew the current certificate.