Frequency of security breaches across the digital asset sector hit an all-time high in the first six months of 2026, pushing total illicit drains beyond $1

You can reuse a CSR indefinitely, subject to some limitations: * If you revoke any certificate with the CSR's public key with reason `keyCompromise`, the public key is blocked and can no longer be used. Thus, the CSR will no longer be accepted, due to containing a blocked key. * Future advancements in cryptography may also result in Let's Encrypt requiring a stronger public key, thus refusing CSRs with known insecure keys. * It has happened in the past that Let's Encrypt stopped supporting a particular algorithm. For example, SHA-1 signed CSRs are no longer accepted. Such deprecations can happen again in the future (though nothing is planned at the moment) * If the CSR contains any extensions (e.g. must-staple extension), Let's Encrypt may stop supporting these in the future.