SSL Cert renewal

[upen desai]

Hello

I have come across several cisco doc ref for the renewal of the SSL certs. 

But still a little confused about the process so i hope you can help.

Cert already exist in the ASA and i need to renew it. 

when choosing the Key Pair from the menu under Add a new Identity certificate, should i choose the one of the existing key pair or create a new one.

The one i have selected in the screenshot, is that correct.

many thanks

Upen Desai

[Marvin Rhoads · Accepted solution]

Assuming it's an adequately strong (i.e. 2048-bit or higher) keypair, you should use the same keypair you currently are using with your existing certificate.

We normally want the common name (cn) to match that of the certificate. The screenshot doesn't appear to show that from what I can see.