I am working on a web application that allows SAML for single sign on. For this purpose, we have issued an x509 certificate. The sign on works fine but the certificate we initially issued is now close to its expiry date and we need to issue a new one.