https://community.cisco.com/t5/network-security/ssl-cert-renewal/m-p/2707149#M190676 <P>Assuming it's an adequately strong (i.e. 2048-bit or higher) keypair, you should use the same keypair&nbsp;you currently are using with your existing certificate.</P><P>We normally want the common name (cn) to match that of the&nbsp;certificate. The screenshot doesn't appear to show that from what I can see.&nbsp;</P> Fri, 12 Jun 2015 21:11:21 GMT Marvin Rhoads 2015-06-12T21:11:21Z https://community.cisco.com/t5/network-security/ssl-cert-renewal/m-p/2707148#M190675 <P>Hello</P><P>I have come across several cisco doc ref for the renewal of the SSL certs.&nbsp;</P><P>But still a little confused about the process so i hope you can help.</P><P>Cert already exist in the ASA and i need to renew it.&nbsp;</P><P>when choosing the Key Pair from the menu under Add a new Identity certificate, should i choose the one of the existing key pair or create a new one.</P><P>The one i have selected in the screenshot, is that correct.</P><P>many thanks</P><P>Upen Desai</P> Tue, 12 Mar 2019 06:06:20 GMT https://community.cisco.com/t5/network-security/ssl-cert-renewal/m-p/2707148#M190675 upen desai 2019-03-12T06:06:20Z https://community.cisco.com/t5/network-security/ssl-cert-renewal/m-p/2707149#M190676 <P>Assuming it's an adequately strong (i.e. 2048-bit or higher) keypair, you should use the same keypair&nbsp;you currently are using with your existing certificate.</P><P>We normally want the common name (cn) to match that of the&nbsp;certificate. The screenshot doesn't appear to show that from what I can see.&nbsp;</P> Fri, 12 Jun 2015 21:11:21 GMT https://community.cisco.com/t5/network-security/ssl-cert-renewal/m-p/2707149#M190676 Marvin Rhoads 2015-06-12T21:11:21Z