I have an asp.net core web application that needs to sign a jwt using the private key associated with a certificate loaded from the windows certificate store, using code similar to this:

RSA privateKey;
X509Certificate2 cert;
using (var store = new X509Store(StoreName.My, StoreLocation.CurrentUser))
 {
 store.Open(OpenFlags.ReadOnly);
 //Locate the required 'Current' certificate using the distinguished name, and create
 // the snapshot wrapper for it
 var certs = store.Certificates.Find(X509FindType.FindBySubjectName, configuration.Current.SubjectName, validOnly: validCertificatesOnly);
 cert = certs[0];
}
privateKey = cert.GetRSAPrivateKey();

Is it safe to use the same RSA instance for signing operations on multiple threads? The call to GetRSAPrivateKey seems to be fairly expensive in terms of time (multiple milliseconds) so I'd rather not take the hit on every request, but I can't find any documentation on whether or not it's thread safe. I've also seen the RSA returned by GetRSAPrivateKey suddenly become unusable after a period of time for no apparent reason (throwing a CryptographicException with a message of 'File not found' for an instance that previously worked fine.