HI, When i renew an SSL certificate will the public key change or be the same as the expired certificate?
When you renew a certificate using the same private key, you extend the life of the private key and all information in the expiring certificate is updated to reflect the renewal, including the key ring connection information.
Technically, when you renew a certificate, you are purchasing a new certificate for the domain and company. Industry standards require Certificate Authorities to hard code the expiration date into certificates. When a certificate expires, it is no longer valid and there is no way to extend its life.
Yes, the keys will change.
A certificate contains a public key. The certificate, in addition to containing the public key, contains additional information such as issuer, what the certificate is supposed to be used for, and other types of metadata. Typically, a certificate is itself signed by a certificate authority (CA) using CA's private key.
If you re-use the same certificate request, the key will not change. If you generate a new request, that'll typically (by default) generate a new key; re-using is sometimes useful e.g., to add another alternate domain name.
If your certificate authority is not requiring a certificate request, then they must be re-using the old one.
The certificate has nothing to do with the keys. Essentially the certificate is just a signature of your public key. You continue to reuse the same key (unless your old public key has an expiry date that's passed).
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With