Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Will public key change on renewing a certificate?

Tags:

HI, When i renew an SSL certificate will the public key change or be the same as the expired certificate?

like image 267
rahul Avatar asked Mar 21 '09 06:03

rahul


People also ask

Does certificate renewal Change private key?

When you renew a certificate using the same private key, you extend the life of the private key and all information in the expiring certificate is updated to reflect the renewal, including the key ring connection information.

What happens when a certificate is renewed?

Technically, when you renew a certificate, you are purchasing a new certificate for the domain and company. Industry standards require Certificate Authorities to hard code the expiration date into certificates. When a certificate expires, it is no longer valid and there is no way to extend its life.

Does the public key change?

Yes, the keys will change.

Does a certificate hold the public key?

A certificate contains a public key. The certificate, in addition to containing the public key, contains additional information such as issuer, what the certificate is supposed to be used for, and other types of metadata. Typically, a certificate is itself signed by a certificate authority (CA) using CA's private key.


2 Answers

If you re-use the same certificate request, the key will not change. If you generate a new request, that'll typically (by default) generate a new key; re-using is sometimes useful e.g., to add another alternate domain name.

If your certificate authority is not requiring a certificate request, then they must be re-using the old one.

like image 197
derobert Avatar answered Sep 19 '22 11:09

derobert


The certificate has nothing to do with the keys. Essentially the certificate is just a signature of your public key. You continue to reuse the same key (unless your old public key has an expiry date that's passed).

like image 33
Adam Hawes Avatar answered Sep 20 '22 11:09

Adam Hawes