If one gives the -newkey option to cmp cr, it is silently ignored.
The enclosed patch makes the cr operation use the key given as -newkey argument, if present (instead of re-using the key given with as -key argument), for the creation of the new cert.
Patch merged.