# Adding new domain to existing SAN cert without regenerating key?

**URL:** <https://community.letsencrypt.org/t/adding-new-domain-to-existing-san-cert-without-regenerating-key/29547>\
**Category:** Server\
**Created:** [March 10, 2017, 3:30am UTC](https://community.letsencrypt.org/t/adding-new-domain-to-existing-san-cert-without-regenerating-key/29547 "2017-03-10T03:30:54Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![pfg](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/pfg/32/1924_2.png) [@pfg](https://community.letsencrypt.org/u/pfg)\
**Post date:** [March 10, 2017, 7:59am UTC](https://community.letsencrypt.org/t/adding-new-domain-to-existing-san-cert-without-regenerating-key/29547/2 "2017-03-10T07:59:23Z")

</div>

The answer to your question is yes, but that probably won’t help you.

One part of setting up TLS is installing the correct server certificate, which includes the domain the certificate covers. You can’t change the domain list on a certificate without issuing a new certificate, and while you _could_ re-use an existing key, the certificate file would change, and your host would have to re-install that certificate, which is probably something they’d charge that fee for.

As an aside, in all likelihood you’d have to pay that fee every 90 days, since that’s how long certificates issued by Let’s Encrypt are valid for, and renewals generate a new certificate as well. Your best options would probably be to either [switch to a web host that supports Let’s Encrypt](https://community.letsencrypt.org/t/web-hosting-who-support-lets-encrypt/6920) or, if that’s not an option, get a one- or two-year certificate from a commercial CA, which is probably cheaper than the installation fee. (They’re available for about $10/year from some resellers.)

---

_[View the full topic](https://community.letsencrypt.org/t/adding-new-domain-to-existing-san-cert-without-regenerating-key/29547)._
