Need NEW CSR For Replacement Certificate domain info 4 years ago updated 4 years ago Answered When requesting a CSR for southtech-tutorials.com, we are getting the same CSR as the previous request, which means the private key will not have changed, which is not acceptable from a security perspective. For our FedRAMP certification, we need the private key to be changed every time we replace the SSL certificate. We need to be able to generate a NEW CSR (and private key).