Andi, are you talking about your user facing SSL certificate, which has nothing to do with Shibboleth operationally, or your SAML signing or SOAP certificate, which does? -- Scott