Contents
Does renewal A certificate change the thumbprint?
No, it is incorrect. Certificate thumbprint is calculated over entire certificate, not just public key. When you renew the certificate, it is changed. At least, validity period will be different as the result, thumbprint on renewed certificate will be different as well.
Why do certificates need to be renewed?
SSL renewal keeps your encryption up to date, which makes everyone safer. SSL certificates have expiration dates hardcoded into them. When they expire, web browsers will warn their users about your website. The reason SSL certificates expire is to keep your encryption up to date.
Do you have to generate a new CSR when renewing SSL?
To renew an SSL/TLS certificate, you’ll need to generate a new CSR. Best practices are to generate a new certificate signing request (CSR) when renewing your SSL/TLS certificate. Generating a new CSR creates a new, unique keypair (public/private) for the renewed certificate.
When does the public key change on renewing a certificate?
If you re-use the same certificate request, the key will not change. If you generate a new request, that’ll typically (by default) generate a new key; re-using is sometimes useful e.g., to add another alternate domain name. If your certificate authority is not requiring a certificate request, then they must be re-using the old one.
When does a Certificate need to be re-keyed?
Circumstances under which certificate re-key can or must take place, such as after a certificate is revoked for reasons of key compromise or after a certificate has expired and the usage period of the key pair has also expired;
Is it possible to maintain the same private key?
This is possible by maintaining the same private key. When received the renewed certificate from the 3rd party certification authority, we can try to import it and assign the private key from the management console (mmc -> certificates). Instead we can import the certificate and then assign the corresponding private key
What happens when you change the expiration date of a certificate?
When you renew your certificate, you are just changing the expiration date of the certificate. Your public and private keys stay the same. Because your private key doesn’t change, your administrator may renew your certificates without your intervention.