Am 01.09.2018 um 20:27 schrieb Valeri Galtsev: > I just checked on my box and confirm that yes, with every renewal of > certificate new key is created. I should realize that fact even before > looking, as it is asymmetric encryption pair, thus the new pair cert+key > is generated (and the cert [request] gets signed). > > Valeri You are commenting on a specific ACME helper tool to create LE certificates? On my side the key stays the same. And as long as it is not compromised there is no need to change it. Alexander