https://github.com/certbot/certbot/issues/2373 (if you want to reuse a CSR; reusing the key is probably easier)