2 ms·FWIW, Certbot does, by default, replace the private key on renewal.by regecks 8y agoFWIW, Certbot does, by default, replace the private key on renewal.