> My question was for sp certificate rollover as mentioned by the following > Shibboleth federations: And that has nothing to do with changing a browser-facing certificate. -- Scott