Update letsencrypt certificates without changing the private key

Question

I want to renew the letsencrypt certificate on my webserver but want to keep the private key same.

I've installed the certificate using certbot 0.35.1

How can I update the certificate (preferably using certbot) without changing the private key?

If possible can I automate this process, for auto renewal?

Why do you want to keep the key? It is more secure to rotate the key. Is the key pinned? — Z.T., Jul 11 '19 at 14:29

score 3 · Answer 1 · answered Jul 11 '19 at 14:11

3

Create a certificate signing request (CSR) and let certbot renew that, using a command like this:

certbot certonly --csr csr.pem

The CSR contains your public key, so you keep the same key pair with this method.

answered Jul 11 '19 at 14:11

Sjoerd

1 Answers1