Hacker News new | ask | show | jobs
by comprambler 898 days ago
The private key is definitely reused between certs unless you go through a process of rekeying which requires a new CSR.
1 comments
charcircuit 898 days ago
It's technically possible to reuse it, but letsencrypt / certbot do not reuse it by default. You have to go out of your way and do extra work to reuse a CSR when renewing a cert.
link
woodruffw 898 days ago
The original poster didn't mention LE or anything else that uses ACME. It's pretty easy to reuse a key in a bespoke PKI setup; the X.509 builder APIs that I've used make it trivial. Which doesn't make it a good idea, of course.
link