This question already has an answer here:

I was wondering, if there is a way to extend the duration of an existing certificate.

  • Or is simply a new certificate requested for the old public key?
  • Is this mentioned somewhere in the certificate? (Someone told me that the trustworthiness of websites is rated on how often the extended the certificate)
  • Does the serial number change in that case?
  • What are reasons to use the old keypair instead of requesting a certificate for a new keyPair?

marked as duplicate by Steffen Ullrich, Xander, techraf, wireghoul, SilverlightFox Sep 12 '16 at 14:22

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    Why would you need to keep the same public key? This doesn't make sense to me. A certificate change is a new certificate, period. – Julie Pelletier Sep 9 '16 at 17:36
  • You can use the same private key if it's matching the required length 2048 bits. The serial number should change as it's not "extending" but "reissuing". There's no point of keeping old private key if you are issuing a new cert (there's technically no such thing as "extending", it's sales term only). – Aria Sep 9 '16 at 17:45
  • 4
    The main part is a duplicate of How to extend x509 certificate validity. Questions about keeping the key or not on renewal are answered in Renew digital certificate. – Steffen Ullrich Sep 9 '16 at 18:02

No. This is not possible as you would be reissuing the certificate. Your serial number will change.

Not the answer you're looking for? Browse other questions tagged or ask your own question.