SSL certificate renewal requires a new CSR file?