When you generate a new cert you do not generate a new keypair every time.