# Generate fresh CSR

**URL:** <https://community.letsencrypt.org/t/generate-fresh-csr/120029>\
**Category:** Help\
**Created:** [April 19, 2020, 11:55am UTC](https://community.letsencrypt.org/t/generate-fresh-csr/120029 "2020-04-19T11:55:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![malz](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@malz](https://community.letsencrypt.org/u/malz)\
**Post date:** [April 19, 2020, 11:55am UTC](https://community.letsencrypt.org/t/generate-fresh-csr/120029/1 "2020-04-19T11:55:11Z")

</div>

Using acme.sh, how does one generate a fresh CSR ?

acme.sh --issue --dns -d [server.example.com](http://server.example.com) --yes-I-know-dns-manual-mode-enough-go-ahead-please

---

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [April 19, 2020, 12:03pm UTC](https://community.letsencrypt.org/t/generate-fresh-csr/120029/2 "2020-04-19T12:03:07Z")

</div>

I’m pretty sure it generates a fresh CSR every time, but could you by any chance refer to the private key specifically? I.e., you want a new private key generated every time the cert gets renewed?

If so, you could use `--always-force-new-domain-key`

See `acme.sh --help` for all the options provided by the script.

---

<div class="post-metadata">

**Author:** ![malz](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@malz](https://community.letsencrypt.org/u/malz)\
**Post date:** [April 19, 2020, 12:27pm UTC](https://community.letsencrypt.org/t/generate-fresh-csr/120029/3 "2020-04-19T12:27:13Z")

</div>

Yes, you are spot on … it does create a new CSR each time (my bad) and i was after a flag to generate a new private key. I’ll give it a go !

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 19, 2020, 12:27pm UTC](https://community.letsencrypt.org/t/generate-fresh-csr/120029/4 "2020-05-19T12:27:14Z")

</div>

Closed on May 19, 2020, 12:27pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.