I want to renew the letsencrypt certificate on my webserver but want to keep the private key same.

I've installed the certificate using certbot 0.35.1

How can I update the certificate (preferably using certbot) without changing the private key?

If possible can I automate this process, for auto renewal?

  • Why do you want to keep the key? It is more secure to rotate the key. Is the key pinned?
    – Z.T.
    Jul 11 '19 at 14:29

Create a certificate signing request (CSR) and let certbot renew that, using a command like this:

certbot certonly --csr csr.pem

The CSR contains your public key, so you keep the same key pair with this method.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.