Old topic - but an important aspect not covered here is that a "renewal" can be actioned from 30 days prior to expiry to 60 days after expiry. A "rekey" on the other hand requires the certificate to be updated within 72 hours. The question to ask is "are we concerned that the key may have been compromised?". If the answer is "No" then a renewal requires less time and is easier to coordinate, especially when involving multiple parties.