An administrator must replace an expired SSL certificate. Which of the following does the administrator need to create the new SSL certificate?

To replace an expired SSL certificate, the administrator needs to create a Certificate Signing Request (CSR). The CSR contains information about the server and the organization, including the public key, which is then sent to a Certificate Authority (CA) to issue the new certificate. OCSP (Online Certificate Status Protocol) is used to check the revocation status of a certificate, not to create one. A private key is generated alongside the CSR, but the CSR itself is the component sent to the CA. CRL (Certificate Revocation List) is another method for checking certificate revocation status.